Why does DNS-01 treat root domains and wildcards the same?

This is available in staging now but enabling it in production is blocked on work at the IETF to resolve issues around parsing multiple CAA extensions:

2 Likes