Additional Record Types Available with Cloudflare DNS

This post introduces and explains the usage of nine new DNS record types: DNSKEY, DS, SSHFP, TLSA, SMIMEA, CERT, PTR, and NAPTR. It details how DNSKEY and DS facilitate delegated DNSSEC for child zones. It explains how SSHFP, TLSA, SMIMEA, and CERT can be used to enhance TLS and SSH security by specifying trusted certificates and keys within DNS, emphasizing the critical need for DNSSEC enablement. PTR records are explained for reverse DNS lookups and IP address ownership validation. NAPTR records are described in the context of service discovery, particularly for SIP. The post provides examples using `kdig` and `openssl` to demonstrate record configuration and verification.