# DNS Authorization lifetime on LE servers **URL:** \ **Category:** Issuance Tech\ **Created:** [June 14, 2016, 9:49am UTC](https://community.letsencrypt.org/t/dns-authorization-lifetime-on-le-servers/17007 "2016-06-14T09:49:21Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![BernhardMM](https://avatars.discourse-cdn.com/v4/letter/b/8baadc/32.png) [@BernhardMM](https://community.letsencrypt.org/u/BernhardMM)\ **Post date:** [June 14, 2016, 9:49am UTC](https://community.letsencrypt.org/t/dns-authorization-lifetime-on-le-servers/17007/1 "2016-06-14T09:49:21Z")
Hi guys, I recently stumbled across this client implementation: [https://github.com/veeti/manuale](https://github.com/veeti/manuale) - and I am quite intrigued with its caching of the DNS authorization. We don’t operate the front end DNS servers ourselves, so changing the TXT entries for every renewal is not feasible. In the source, manuaLE mentions a current lifetime of 300+ days for DNS challenges on LE’s side - can someone from LE confirm that this is the case, and if this is intended to stay this way? We need to decide on certs for a new service, and the X3/X4 change has already cause some headache for us, so we would like to know if this caching is going to stay, or if changing the authorization with every renewal (as in the official client) is the only safe way to plan for the future. Cheers, Bernhard ---
**Author:** ![leader](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/leader/32/7569_2.png) [@leader](https://community.letsencrypt.org/u/leader)\ **Post date:** [June 14, 2016, 10:10am UTC](https://community.letsencrypt.org/t/dns-authorization-lifetime-on-le-servers/17007/2 "2016-06-14T10:10:31Z")
You don’t have to set a new TXT record for _every_ renewal indeed. I’m not sure how it’s done in the official client, but for example in the Perl client (and on ZeroSSL) if your previous verification is still valid, the process goes straight to getting the certificate, without the challenge/verification step. 300 days are currently hardcoded in the boulder code: > ---
**Author:** ![BernhardMM](https://avatars.discourse-cdn.com/v4/letter/b/8baadc/32.png) [@BernhardMM](https://community.letsencrypt.org/u/BernhardMM)\ **Post date:** [June 14, 2016, 10:25am UTC](https://community.letsencrypt.org/t/dns-authorization-lifetime-on-le-servers/17007/3 "2016-06-14T10:25:34Z")
Yep, I am just interested to learn if that 300 days are going to stay, or if they are likely to be cut down to something unusable, ---
**Author:** ![pfg](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/pfg/32/1924_2.png) [@pfg](https://community.letsencrypt.org/u/pfg)\ **Post date:** [June 14, 2016, 2:25pm UTC](https://community.letsencrypt.org/t/dns-authorization-lifetime-on-le-servers/17007/4 "2016-06-14T14:25:53Z")
There hasn’t been any discussion about reducing the lifetime of authorization resources. The CA/B Forum is currently developing new rules for domain validation and is probably going to settle on a validation period that is significantly longer than the 300 days currently in use by Let’s Encrypt, so you should be good on that front too. At the very least, the expiration dates for authorization resources should not be changed after the fact, so you should be able to at least assume that your current authorizations will last 300 days, and any change will probably be announced somewhere. ---
**Author:** ![BernhardMM](https://avatars.discourse-cdn.com/v4/letter/b/8baadc/32.png) [@BernhardMM](https://community.letsencrypt.org/u/BernhardMM)\ **Post date:** [June 14, 2016, 2:40pm UTC](https://community.letsencrypt.org/t/dns-authorization-lifetime-on-le-servers/17007/5 "2016-06-14T14:40:08Z")
Great! Thank you for the reply, extending the period would definitely be appreciated 🙂 Cheers, Bernhard ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [July 14, 2016, 2:40pm UTC](https://community.letsencrypt.org/t/dns-authorization-lifetime-on-le-servers/17007/6 "2016-07-14T14:40:22Z")
Closed on July 14, 2016, 2:40pm UTC This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.