Let's Encrypt is expanding its domain validation process by incorporating two additional remote perspectives. This brings the total number of remote perspectives to six, alongside one primary datacenter request, resulting in seven validation requests per domain.
The motivation for this change is to improve domain validation security and protection against BGP attacks. Increased perspectives make it more difficult for attackers to hijack validation requests. This update also ensures compliance with the Baseline Requirements (BR 3.2.2.9 Multi Perspective Issuance Corroboration), which mandates the use of at least five remote Network Perspectives by December 15, 2026.
For a domain validation to succeed, the primary server and a quorum of remote perspectives must receive the correct challenge response. The new setup requires corroboration from remote Network Perspectives within the service regions of at least two distinct Regional Internet Registries.
Let's Encrypt anticipates minimal impact on users. The new validation regions will be implemented in a staging environment on Tuesday, October 27th, 2026. The production rollout is planned for Tuesday, November 10th, 2026, assuming successful staging.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's briefNew every morning, and the back catalogue is archived by date.
Let's Encrypt is increasing its remote perspectives for domain validation from four to six, totaling seven validation requests. This change enhances security against BGP attacks and complies with Baseline Requirements for Multi-Perspective Issuance Corroboration.