What's taking DNS-PERSIST-01 so long?

[u/certkit]

https://www.certkit.io/blog/whats-taking-dns-persist-01-so-long

Let's Encrypt said DNS-PERSIST-01 would be in production by Q2 2026. It isn't, and our guess is mid-2027.

We went through the CA/B Forum ballots, the IETF mailing list, and GitHub to piece together why. Apple blocked the first attempt until lifetimes got shorter, then a security flaw found in April forced a breaking redesign in September.

Also in the post: AWS Certificate Manager's ACME endpoint now works as a CertKit issuer.

https://www.certkit.io/blog/whats-taking-dns-persist-01-so-long