Reading through your docs, as I understood it, one will need a new DNS token on every renewal. As you point out perfectly well, storing an API key on the webserver is much too dangerous, especialy since my domain provider also allows tranfers and deletions of domain through it. This means I will hav…

Hi, welcome to the forum! The requirement to have a fresh token on each renewal comes from the Baseline Requirements . It’s there to make sure CAs are verifying an authorization that is “fresh” - that is, that the requester is still actively in control of the domain name. I realize it’s rather compli…

Why has DNS-01 to be such complicated?

Issuance Tech

tdelmas July 30, 2019, 10:07pm 2

A beginning of explanation: Do DNS Challenge Records have an expiration?

3 Likes

Topic		Replies	Views
Question about renewal certificate with dns challenge Issuance Tech	9	7008	August 11, 2018
Do DNS Challenge Records have an expiration? Issuance Tech	3	4884	June 7, 2017
Quick question about DNS challenges Issuance Policy	8	2318	March 8, 2017
Why is there no static DNS verification? Issuance Tech	16	4351	November 24, 2017
Renewal using DNS-01 Help	15	8528	January 23, 2017

Why has DNS-01 to be such complicated?

Related topics