i've to update at least at 9.9.6 to support CCA feature (for SSL certificates)
which version are you using?
any suggestion?
No suggestion, here, except to perhaps open a ticket for whatever is not right with the newer bind in your environment.
My authoritative DNS *was* at Dyn for many, many years. Unfortunately, after their acquisition by Oracle, they aren;t very interested in enhancing their standard DNS offering, and the pricing of their managed DNS was unattractive. Their current standard DNS does not support CAA, so I switched to my domain registrar for DNS (I don't need DDNS, and if I did, I could always use a CNAME for that, pointing to the DDNS host). Rosenthal & Rosenthal was a reseller for Wild West Domains, which in turn was consumed by GoDaddy, so we're now a reseller for GoDaddy.
(The web portal is dreadful, BTW, and almost impossible to navigate without using Chrome - no matter how new the Firefox, SeaMonkey, or Pale Moon version used.)
Internally, I use NetWare DNS as a caching server. It does not support CAA, but for caching purposes, this is not of any consequence.
--
Lewis
-------------------------------------------------------------
Lewis G Rosenthal, CNA, CLP, CLE, CWTS, EA
Rosenthal & Rosenthal, LLC www.2rosenthals.com
visit my IT blog www.2rosenthals.net/wordpress
-------------------------------------------------------------