MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: "IETF-Announce" <ietf-announce@ietf.org>
Subject: Last Call: <draft-ietf-acme-dns-account-label-04.txt> (Automated
 Certificate Management Environment (ACME) DNS Labeled With ACME Account ID
 Challenge) to Proposed Standard
Auto-Submitted: auto-generated
Precedence: bulk
Sender: <iesg-secretary@ietf.org>
Message-ID: 
 <179313335885.492572.16043728092030043705@dt-datatracker-7dc874ff8f-5wfjq>
Date: Tue, 27 Oct 2026 13:35:58 -0700
Message-ID-Hash: NBYNMFXZXF35264LQ3RVMPIM4P7CNWCE
CC: acme-chairs@ietf.org, acme@ietf.org,
 draft-ietf-acme-dns-account-label@ietf.org, mike@ounsworth.ca
Reply-To: last-call@ietf.org, acme@ietf.org
Archived-At: 
 <https://mailarchive.ietf.org/arch/msg/ietf-announce/JXt7GZVCv8TnKiMYoS058pbLc2Q>


The IESG has received a request from the Automated Certificate Management
Environment WG (acme) to consider the following document:
  'Automated Certificate Management Environment (ACME) DNS Labeled With
   ACME Account ID Challenge'
  <draft-ietf-acme-dns-account-label-04.txt> as Proposed Standard

The IESG plans to make a decision on this document in the coming weeks, and
solicits last-call comments. Please send substantive comments to the
last-call@ietf.org mailing list, with acme@ietf.org copied, no later than
2026-11-10.  Please retain the beginning of the Subject line to facilitate
automated sorting.

Abstract

   This document outlines a new DNS-based challenge type for the ACME
   protocol that enables multiple independent systems to authorize a
   single domain name concurrently.  By adding a unique label to the DNS
   validation record name, the dns-account-01 challenge avoids CNAME
   delegation conflicts inherent to the dns-01 challenge type.  This is
   particularly valuable for multi-region or multi-cloud deployments
   that wish to rely upon DNS-based domain control validation and need
   to independently obtain certificates for the same domain.


The file can be obtained via
https://datatracker.ietf.org/doc/draft-ietf-acme-dns-account-label/


No IPR declarations have been submitted directly on this I-D.