🔒Let's Encrypt Adds Two New Remote Perspectives for Validation
Your SSL Certificates Just Got More Secure
TL;DR
Let's Encrypt is beefing up domain validation security by adding two new remote perspectives, making it harder for attackers to hijack validation requests. This change will roll out in production on November 10th, 2026.
Let's Encrypt is adding two new remote perspectives for domain validation, bringing the total to seven validation requests during the process. This move aims to comply with the Baseline Requirements and enhance security against BGP attacks. The change will have minimal impact on users but significantly improves validation integrity. Let's Encrypt will start testing the new validation process in staging on October 27th, 2026, with a production rollout on November 10th, 2026.
Key Points
Let's Encrypt introduces two new remote perspectives for domain validation, increasing security against BGP attacks.
The Baseline Requirements mandate at least five remote Network Perspectives for multi-perspective issuance corroboration.
Validation will involve seven total requests: one from the primary datacenter and six from remote perspectives.
For validation to succeed, a quorum of remote perspectives must confirm the correct challenge response.
Staging tests begin on October 27th, 2026, with production rollout on November 10th, 2026.
Why It Matters
If you're managing SSL certificates, this change improves validation security. The new perspectives make it harder for attackers to hijack validation requests. However, the update will have little to no impact on users, ensuring a smooth transition.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,567 builders reading daily.