caddytls: Temporarily treat "" and "@" as equivalent for DNS publication

Fixes https://github.com/caddyserver/caddy/issues/6895#issuecomment-2750111096

Matthew Holt committed Mar 25, 2025 at 16:24 UTC ea77a9ab67d8c04f513adaf0a1c648c738e25922

1 file changed +2 -1

modules/caddytls/ech.go

+2 -1

@@ -660,7 +660,8 @@ nextName:

660 var httpsRec libdns.Record

661 var nameHasExistingRecord bool

662 for _, rec := range recs {

663 - if rec.Name == relName {

663 + // TODO: providers SHOULD normalize root-level records to be named "@"; remove the extra conditions when the transition to the new semantics is done

664 + if rec.Name == relName || (rec.Name == "" && relName == "@") {

665 // CNAME records are exclusive of all other records, so we cannot publish an HTTPS

666 // record for a domain that is CNAME'd. See #6922.

667 if rec.Type == "CNAME" {