[sureglymop]

Also, DNS-PERSIST-01 seems to be coming soon for Let's Encrypt, which should allow even people that can't easily dynamically update their DNS records to get wildcard certs. I assume this might become more widely used than HTTP-01 challenges.

[inigyou]

I wish someone would write a blog post about the difference between DNS registrars and DNS hosts, because I've seen people assume they need to use a registrar that has an API in order to change their DNS records programmatically. I used to assume that too.

[sureglymop]

I agree that it can be confusing. I use RFC 2136 DNS UPDATE with my own DNS server. But for example, for my workplace this new challenge is convenient as they refuse to want to run their own DNS server.

[Natfan]

- registrars control NS records, however these can be changed - NS records control other records - registrars can also use their own nameservers to manage your DNS

[echoangle]

Yeah, so basically it’s fine as long as your registrar lets you set your own NS. Are there ones where you can’t do that?

[Natfan]

apparently, networksolutions https://news.ycombinator.com/item?id=39673213