Last Call: <draft-ietf-acme-dns-account-label-04.txt> (Automated Certificate Management Environment (ACME) DNS Labeled With ACME Account ID Challenge) to Proposed Standard

The IESG <iesg-secretary@ietf.org> Tue, 27 October 2026 20:35 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
Subject: Last Call: <draft-ietf-acme-dns-account-label-04.txt> (Automated Certificate Management Environment (ACME) DNS Labeled With ACME Account ID Challenge) to Proposed Standard
Auto-Submitted: auto-generated
Precedence: bulk
Sender: iesg-secretary@ietf.org
Message-ID: <179313335885.492572.16043728092030043705@dt-datatracker-7dc874ff8f-5wfjq>
Date: Tue, 27 Oct 2026 13:35:58 -0700
Message-ID-Hash: NBYNMFXZXF35264LQ3RVMPIM4P7CNWCE
CC: acme-chairs@ietf.org, acme@ietf.org, draft-ietf-acme-dns-account-label@ietf.org, mike@ounsworth.ca
Reply-To: last-call@ietf.org, acme@ietf.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf-announce/JXt7GZVCv8TnKiMYoS058pbLc2Q>

The IESG has received a request from the Automated Certificate Management
Environment WG (acme) to consider the following document:
  'Automated Certificate Management Environment (ACME) DNS Labeled With
   ACME Account ID Challenge'
  <draft-ietf-acme-dns-account-label-04.txt> as Proposed Standard

The IESG plans to make a decision on this document in the coming weeks, and
solicits last-call comments. Please send substantive comments to the
last-call@ietf.org mailing list, with acme@ietf.org copied, no later than
2026-11-10.  Please retain the beginning of the Subject line to facilitate
automated sorting.

Abstract

   This document outlines a new DNS-based challenge type for the ACME
   protocol that enables multiple independent systems to authorize a
   single domain name concurrently.  By adding a unique label to the DNS
   validation record name, the dns-account-01 challenge avoids CNAME
   delegation conflicts inherent to the dns-01 challenge type.  This is
   particularly valuable for multi-region or multi-cloud deployments
   that wish to rely upon DNS-based domain control validation and need
   to independently obtain certificates for the same domain.



The file can be obtained via
https://datatracker.ietf.org/doc/draft-ietf-acme-dns-account-label/


No IPR declarations have been submitted directly on this I-D.

Last Call: <draft-ietf-acme-dns-account-label-04.… The IESG