I typically use HTTP challenges to generate LetsEncrypt certs. However, there are some cases where this is not practical. I've not used DNS challenges before
So a couple of related questions -
Do the DNS challenges remain the same across renewals? (https://letsencrypt.org/2019/10/09/onboarding-your-customers-with-lets-encrypt-and-acme.html vaguely implies not as it talks about the need to change the DNS if the provider changes - but I could easily be misinterpreting this.
If I start off using a DNS challenge, will renewals automatically use the same challenge - ie does the same
certbot -q renewautomatically know which certs require HTTP challenges and which ones require DNS challenges if I have both running on my server?