Google Domains DNS API Support? (not Google Cloud DNS)

[jvanasco]

@jrddunbr

That said, one can set up their own DNS server and then use that to do the challenges, but it’s something that I believe the DNS provider should handle with an API, honestly. Much less work for the end user.

It's actually not good for the end user, because these APIs rarely have safe permissions and ACLs. Most DNS APIs will allow the token to update A/MX records; many will even allow the token to transfer the domain away. This makes automatic renewal incredibly unsafe, as a compromised server would expose the plaintext token.

The best option in almost every case is to:

1. install acme-dns on a server you control (GitHub - joohoi/acme-dns: Limited DNS server with RESTful HTTP API to handle ACME DNS challenges easily and securely.)
2. CNAME your _acme-challenge text records onto the acme dns instance