-
-
Notifications
You must be signed in to change notification settings - Fork 5.5k
Open
Description
Please add support for the drafted challenge type.
IETF has drafted a new challenge type for ACME protocol, known as dns-persist-01:
https://datatracker.ietf.org/doc/html/draft-ietf-acme-dns-persist-00
LetsEncrypt aims to implement this challenge:
https://letsencrypt.org/2026/02/18/dns-persist-01.html
The new challenge type promotes security by removing DNS credentials and write access from the ACME implementation.
This new challenge type reduces the amount of DNS updates that are necessary, saving bandwidth and processing on overloaded networks.
It also facilitates an easier-to-adopt deployment-method as one DNS record can be created for the whole domain.
Further details can be found in the included articles.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels