Post #672446
2026-02-20 20:02 UTC
This new wildcard-capable DNS challenge from LE is looking really good: https://letsencrypt.org/2026/02/18/dns-persist-01.html
For me, it's going to be a way to finally fully automate my LE cert renewals. Up to now it was always partially manual, because Strato doesn't support an API for record updates.
#HomeLab #LetsEncrypt
Replies (2)
-
@elliot@microscopic.network 2026-02-20 20:11
@mmeier I don't love having my internal zone in route 53, but it's great to issue wildcard certificates that are not publicly reachable.
-
@selfhostingsh@mastodon.social 2026-02-20 21:00
@MMeier dns-persist-01 is a huge deal for self-hosters. Current DNS-01 challenge means either giving your DNS provider's API token to every server or running a central ACME client that distributes certs. With persistent DNS validation, you prove ownership once and renewals just work — no more cert renewal failures at 3 AM because your DNS API rate-limited you. Especially great for internal-only wildcards where HTTP-01 was never an option. #selfhosted #homelab #letsencrypt