# DNS Challenge not working with CNAMEd domains

**URL:** <https://community.traefik.io/t/dns-challenge-not-working-with-cnamed-domains/12030>\
**Category:** Traefik v2\
**Tags:** letsencrypt-acme, docker\
**Created:** [October 7, 2021, 8:55pm UTC](https://community.traefik.io/t/dns-challenge-not-working-with-cnamed-domains/12030 "2021-10-07T20:55:30Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![bgeneto](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/bgeneto/32/4365_2.png) [@bgeneto](https://community.traefik.io/u/bgeneto)\
**Post date:** [October 14, 2021, 1:22am UTC](https://community.traefik.io/t/dns-challenge-not-working-with-cnamed-domains/12030/3 "2021-10-14T01:22:46Z")

</div>

> [@cakiwi](#):
>
> Your TXT record has to be updated on the traefik.mydomain.com.br domain.

I thought that my TXT record could be updated/submited for the CNAMEd domain (`mydomain.duckdns.org`), like Caddy server does with the `override_domain` directive in the DNS challenge plugin, please see this [link](https://caddy.community/t/duckdns-plugin-ignoring-override-domain/13824/2).

Also, this behavior is supported by Let’s Encrypt, [let's see](https://letsencrypt.org/docs/challenge-types/#dns-01-challenge):

> Since Let’s Encrypt follows the DNS standards when looking up TXT records for DNS-01 validation, you can use CNAME records or NS records to delegate answering the challenge to other DNS zones. This can be used to delegate the `_acme-challenge` subdomain to a validation-specific server or zone. It can also be used if your DNS provider is slow to update, and you want to delegate to a quicker-updating server.

In my case, I can't simply update or change the certificateProviders because my current DNS provider is unsupported (by Traefik).

Regards.

---

_[View the full topic](https://community.traefik.io/t/dns-challenge-not-working-with-cnamed-domains/12030)._