Skip to content

Support for DNS-persist-01 challenge #6812

@j-garmatter

Description

@j-garmatter

Please add support for the drafted challenge type.

IETF has drafted a new challenge type for ACME protocol, known as dns-persist-01:
https://datatracker.ietf.org/doc/html/draft-ietf-acme-dns-persist-00

LetsEncrypt aims to implement this challenge:
https://letsencrypt.org/2026/02/18/dns-persist-01.html

The new challenge type promotes security by removing DNS credentials and write access from the ACME implementation.
This new challenge type reduces the amount of DNS updates that are necessary, saving bandwidth and processing on overloaded networks.
It also facilitates an easier-to-adopt deployment-method as one DNS record can be created for the whole domain.
Further details can be found in the included articles.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions