No, DNSSEC isn&#x27;t required. LetsEncrypt supports a bunch of DV methods right now[0], but the bottom line is that if someone can control either your DNS server or your web server (any web server on an IP at which your domain points) then they can always get a certificate for your domain. This applies to all DV cert issuance from most CAs afaik.<p>Full DNSSEC verification by the issuing CA (LetsEncrypt) still wouldn&#x27;t mitigate attacks against the &quot;Simple HTTP&quot; method.<p>[0]<a href="https:&#x2F;&#x2F;letsencrypt.github.io&#x2F;acme-spec&#x2F;#rfc.section.7" rel="nofollow">https:&#x2F;&#x2F;letsencrypt.github.io&#x2F;acme-spec&#x2F;#rfc.section.7</a>