Infrastructure notes for the public webUpdated August 24, 2026 · Evidence before hype
DNS FIELD NOTE · August 24, 2026

The DNS record types worth reading first

A field guide to A, AAAA, CNAME, MX, TXT, CAA and NS records, with the operational question behind each one.

Close view of DNS record cards labeled A, MX, TXT and CAA beside a handwritten zone file
Editorial photograph made for this note. It shows a working context, not a measured claim.

The DNS record types worth reading first begins with a practical question: how can a reader inspect record meaning and inspection order without confusing a provider promise with a field observation?

Method for this question

Read a DNS zone in dependency order. Start with NS at the parent and authoritative servers, then inspect A and AAAA for the web target, MX for inbound mail, TXT for authentication and CAA for certificate authority policy. Add CNAME only after confirming which name is an alias and which name owns the address. Use the exact hostname, record type, resolver and timestamp in every note. A command such as dig, a resolver web tool or the provider panel can be useful, but label which view it represents. A screenshot without the query name and TTL is weak evidence.

What to record

  • address records for web services
  • mail routing and authentication records
  • certificate authority authorization
  • delegation and authoritative nameservers

For a web failure, compare the authoritative answer with two recursive resolvers and check TTLs. For mail, follow the MX target to its A or AAAA records, then inspect SPF, DKIM and DMARC separately. For certificates, look at CAA only after identifying the CA and validation hostname. A CNAME at the zone apex, an unexpected AAAA record or a stale TXT string often explains a symptom that looks like hosting trouble. Capture both positive and negative answers; an NXDOMAIN result has different meaning from a name that exists but lacks the requested type.

Field rule

Keep the observation, the interpretation and the recommendation in separate sentences.

A realistic failure pattern

A company changes its website provider but leaves the old AAAA record in place. Some IPv6-capable visitors reach the old server while IPv4 visitors reach the new one, creating an intermittent report. The diagnosis is to query A and AAAA from several resolvers, test each returned address directly where possible and compare the deployment date with TTL history. The repair is to remove or update the stale record, wait for the documented cache window and repeat the checks. The useful result is a before-and-after record set, not a claim that DNS is generally slow.

Errors and boundaries

Do not infer that every TXT record is an ownership token or that every CNAME points to a web service. TXT is a container used by several systems, and mail or certificate vendors may require exact quoting. A DNS panel may hide inherited, flattened or provider-generated records. TTL is not a promise that every resolver will refresh at the same instant, especially after negative caching. DNS record syntax and assignment rules belong to the relevant standards and provider documentation; this field guide is an inspection order, not a substitute for zone-owner approval.

What this does not prove

A record lookup shows one answer at one resolver and time. It does not describe every cached view of a zone.

The Domain Host USA desk uses the documented fact, field observation, provider statement and editorial recommendation labels so readers can see what kind of sentence they are reading.

This note connects to the Infrastructure Field Desk, where the sample method and dated observations remain visible. Continue through DNS & Internet for related decisions rather than treating one check as a complete review.