Google proposes new dns-account-01 challenge type

With the hashed URI based value, the departments don't have to coordinate to prevent collisions. With anything user-provided, they would. However, if they were already coordinating and sharing a single ACME account between them, they'd have to create a new account in order to not collide (assuming they both wanted a cert for the same name).

This new challenge type in general would also solve @skreien's problem here:

3 Likes