Is it possible to restrict/limit verification for my domain to only the DNS-01 challenge? I don’t see any mention of this at Challenge Types , so I guess not. I’d like to request this feature then. My rationale is that I’d like the option of not “blessing” IP-based security by providing certificates…

https://tools.ietf.org/html/rfc8657#section-4 will do exactly what you want - not yet enabled in production but coming eventually … You can testing it out on staging though, it’s working there.

Restrict challenges for a domain

Feature Requests

Osiris May 22, 2020, 6:47pm 4

Nothing, it's only active in staging, not the production endpoints. See ACME-CAA "validationmethods" support - #5 by jsha for more information.

2 Likes

Topic		Replies	Views
How to only allow http-01 or dns-01? Help	5	2909	February 4, 2018
Disable HTTP and ALPN challenges for a domain Feature Requests	12	293	October 3, 2024
DNS Challenge vs HTTP Help	22	3381	January 5, 2023
Forbid HTTP01 challange Issuance Policy	13	2757	November 20, 2018
ACME-CAA "validationmethods" support API Announcements	5	8255	September 25, 2018

Restrict challenges for a domain

Related topics