Ballot SC-088v3: DNS TXT Record with Persistent Value DCV Method

Overview

• Ballot SC-088v3 is a Server Certificate Working Group ballot on a DNS TXT Record with Persistent Value DCV method.
• The ballot passed the voting requirements for both Certificate Issuers and Certificate Consumers, and quorum was met.
• The ballot proposes a Final Maintenance Guideline and entered a 30-day intellectual property rights review period after the initial vote.

What the ballot does

• Adds section 3.2.2.4.22, DNS TXT Record with Persistent Value, as a new domain control validation method in the TLS Baseline Requirements.
• The stated purpose is to let domain owners establish account-scoped DNS validation records that can be reused across multiple certificate issuances.
• The ballot states this removes the need to update DNS records for each certificate renewal while maintaining equivalent security to existing DNS-based validation methods.

Scope of the change

• Modifies the Baseline Requirements for the Issuance and Management of Publicly-Trusted TLS Server Certificates based on Version 2.1.7.
• The linked review artifacts state the modified text is for review notice purposes only and not yet in effect at that stage.

Process and outcome

• Discussion ran from September 23, 2025 21:30 UTC to October 2, 2025 15:44:59 UTC.
• Voting ran from October 2, 2025 15:45:00 UTC to October 9, 2025 15:45:00 UTC.
• Certificate Issuers cast 26 YES, 0 NO, 0 ABSTAIN.
• Certificate Consumers cast 3 YES, 0 NO, 0 ABSTAIN.
• The page states the required issuer supermajority, consumer majority, at least one affirmative vote in each category, and quorum were all MET.

IPR review period

• The review period started on 2025-10-09 18:00:00 UTC and ended on 2025-11-08 18:00:00 UTC.
• Members with Essential Claims to exclude were instructed to submit a Notice to Exclude before the end of the review period.
• The supplied evidence does not mention any exclusion notice being filed.