> I think they should do a real ALPN protocol and do the validation through that. Agreed. > But let's assume time to market for that would exceed a year. I'm

> I think they should do a real ALPN protocol and do the validation through that. Agreed. > But let's assume time to market for that would exceed a year. I'm sure it would take a year or more for good packages for most languages to exist, but, it doesn't seem so complex that it should take a year for it to exist and for it to be usable if you're sufficiently motivated (EG: you're willing to write your own software). > In the mean time, people reliant on TLS-SNI-01 are likely going to need to do something else. I just moved to using a commercial wildcard certificate. I didn't particularly want to, but, for this and a few other reasons, LetsEncrypt became non-viable for me.