Wildcard issuance: two TXT records for the same name

[cpu]

Hi @cc2e6,

@cc2e6

Even by setting the TTL to the minimum allowed by my DNS provider (30s) it is challenging to ensure that the authorization for one will not be contaminated by the authorization for the other (I just ran into the problem myself).

This sounds like a problem with your DNS provider. The DNS RFCs allow two TXT records under the same name. Boulder, the Let's Encrypt server-side CA, checks all of the TXT records when doing DNS-01 validation. E.g. a TXT value for the base domain (example.com) next to a TXT value for the wildcard domain will not cause either validation to fail.