[aflukasz]

Yeah, but then you can just as well use http-01 with like same effort.

[gruez]

no, because dns supports wildcard certificates, unlike http.

[cpach]

dns-01 is also good for services on a private network.

[aflukasz]

Ah, good point.