Skip to content

DNS-01 vs HTTP-01

HTTP-01 needs port 80 on the name. DNS-01 needs a TXT record and is mandatory for wildcards.

Answer first

HTTP-01 needs port 80 on the name. DNS-01 needs a TXT record and is mandatory for wildcards.

Tradeoffs

Pick the control you need: validation depth, wildcard support, key custody, or operational tempo. Encryption strength is not the differentiator in these comparisons.

What this platform does

One request shape for inventory, orders, webhooks and optional deploy targets. Multi-CA is an explicit provider field — not automatic failover after a challenge is published.

What we will not claim

No official partnership. No “winner.” No encryption-strength ranking. Commercial CA prices come from your contract with that CA. Sources: CA documentation and CA/Browser Forum Baseline Requirements.

Related reading

Academy stays evergreen. Insights covers dated schedule changes. Docs describe the API you actually call.