DNS-PERSIST-01：单次 DNS 记录修改即可供持久签发 TLS 证书；预计 26 年 Q2 正式发布。

- 和 DNS01 的 _acme-challenge 不同，使用的是 _validation-persist 域名前缀。
- TXT 记录包含证书签发方、ACME 账户信息、签发政策，以及授权过期时间等信息。

https://letsencrypt.org/2026/02/18/dns-persist-01.html

#PKI #LetsEncrypt
letsencrypt.org
DNS-PERSIST-01: A New Model for DNS-based Challenge Validation
When you request a certificate from Let’s Encrypt, our servers validate that you control the hostnames in that certificate using ACME challenges. For subscribers who need wildcard certificates or who prefer not to expose infrastructure to the public Internet…
 
 
Back to Top
OKHK