Restricted API keys (for dns-01 verification)

[564656963]

New Token Scoping Interface

Hi all, We’ve deployed a new interface that allows configuring API tokens with higher granularity, on the per-RRset level. This allows, for example, to set up tokens that can’t manipulate any DNS records except for ACME challenges. The new interface is described here: Manage Tokens — deSEC DNS API documentation Old tokens, including their configuration, remain valid. In particular: If you used the previous version (“domain scoping” instead of RRset scoping), these tokens now have subname an…