hn.today

Let's Encrypt is adding two additional remote perspectives for domain validation

community.letsencrypt.org236 points76 comments
Screenshot of Let's Encrypt is adding two additional remote perspectives for domain validation

A certificate authority will increase the number of remote network vantage points used during domain validation from four to six, producing seven total validation requests (one from the primary datacenter plus six remote perspectives). This change implements multi-perspective issuance corroboration required by the CA/Browser Forum baseline rules, which mandate at least five remote perspectives and require those corroborating perspectives to be located within the service regions of at least two distinct Regional Internet Registries. Validation will only succeed if the primary server and a quorum of the remote perspectives observe the correct challenge response, strengthening resistance to BGP hijacks and other localized routing attacks.

The rollout is scheduled to begin in staging on October 27, 2026 and, barring issues, move to production on November 10, 2026. The operator expects little to no user impact from the change and will provide progress updates on the announcement thread. The adjustment expands geographic coverage and visibility for validation checks and aligns operational practice with the new baseline requirements intended to harden issuance against network-level attacks.

Read on community.letsencrypt.org76 comments on Hacker News

Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.

More in Security

The daily digest

Today's best Hacker News stories, summarized and screenshotted, one email a day.