Let's Encrypt adds two remote perspectives to block BGP hijacking of domain validation
Let's Encrypt is adding two additional remote perspectives for domain validation
Let's Encrypt is expanding multi-perspective domain validation from four to six remote perspectives, bringing total validation requests to seven. The change complies with the CA/Browser Forum's Baseline Requirements, which mandate at least five remote perspectives across two distinct Regional Internet Registries by December 2026. More perspectives make it harder for attackers to hijack validation via BGP attacks. Staging begins October 27, 2026, with production on November 10; user impact is expected to be minimal.
For validation to succeed, the primary server and a quorum of remote perspectives must receive the correct challenge response. This makes it more difficult for attackers to hijack validation requests.