As their verification process already requires DNS to be correct, can we get a way to verify directly via DNS?<p>Maybe I could put a public key in DNS, sign the CSR with the private key, they’d poll the DNS for the key, verify, and approve it?<p>That would improve the ability to automate it for me a lot, without having to use a webserver.