Let's encrypt turned on DNS validation a few days ago https://twitter.com/letsencrypt/status/689919523164721152