Type
Product improvement
Description
Alternate,secondary or custom CNAME key RR for DCV validation
Benefit
Unlocking valuable RR for domain, since _acme-challenge. is a common RR for domain verification, being forced to lock _acme-challenge. for DCV validation limits the ability to use this record for other purposes. A better alternative would be to either use a specific DCV validation RR ie _acme-DCV-challenge., use an custom key value it mydcvrecord._acme-challenge. or use a randomized zone specific RR key. easiest option would be a separate DVC acmechallenge key, ie _acme-DCV-challenge. (caps for visibility). To make the solution backwards compatible you could still use _acme-challenge. and if that faisl verification lookup an secondary RR _acme-dcv-challenge.
This may be an issue with domains that are not added with full DNS like CNAME integration.