Yes, but that is only a challenge-response DNS verification.<p>What I’m looking for is &quot;I write a value into DNS once, and use that to prove at any future point at which it exists that I still control the DNS&quot;.<p>In this example, by putting an RSA public key in there. (the very same I use for the CSR)