https://www.turbolightsolutions.com/tags/acme/Recent content in Acme on TurboLight SolutionsHugoen-usWed, 01 Jul 2026 00:00:00 +0000https://www.turbolightsolutions.com/posts/dns-persist-01-rollout-blocked-by-security-issue/Wed, 01 Jul 2026 00:00:00 +0000https://www.turbolightsolutions.com/posts/dns-persist-01-rollout-blocked-by-security-issue/<p>There is a new ACME validation method, <code>dns-persist-01</code>, being standardized at the IETF, and it has even been rolled out to Let&rsquo;s Encrypt&rsquo;s staging environment. However, an unresolved security concern is blocking progress on the standard and the roll-out in production for Let&rsquo;s Encrypt.</p> <h2 id="dns-persist-01-dns-propagation-delays-begone"><code>dns-persist-01</code>: DNS propagation delays begone!</h2> <p>While ACME has had a DNS-based validation method (<code>dns-01</code>) since the very beginning <sup id="fnref:1"><a href="#fn:1" class="footnote-ref" role="doc-noteref">1</a></sup>, it requires real-time updates to DNS for every validation attempt. This creates two issues:</p>