1
Hey everybody,
Let's Encrypt is adding two new remote perspectives for domain validation. This change is motivated by the fact that increased perspectives provide more domain validation security and is required by the Baseline Requirements which is quoted below. Increasing the number and coverage of our domain validation perspectives improves visibility and protection against BGP attacks.
BR 3.2.2.9 Multi Perspective Issuance Corroboration
During domain validation, this means that we will make seven total validation requests, one from the primary datacenter and six from remote perspectives (previously four). For validation to succeed, the primary server and a quorum of remote perspectives must receive the correct challenge response. This makes it more difficult for attackers to hijack validation requests. To learn more about multi-perspective domain validation, please see our earlier blog post when Let's Encrypt first added new perspectives.
We expect little to no impact to users. Let's Encrypt will begin performing domain validation with the new regions in staging on Tuesday, October 27th, 2026. Assuming all goes well, we will do the production rollout on Tuesday, November 10th, 2026. Updates will be posted in this thread.
Happy issuance!