DNS TXT
Create a TXT record named _trustcert.example.com. Its value is trustcert-verify=<your-token>. The server concatenates segmented TXT values before comparing them. DNS propagation can take time.
Ownership is a prerequisite, not a security or business-identity guarantee.
Verified checks, owner statements, and community opinions have distinct assurance levels. Preserve those labels in every integration.
Create a TXT record named _trustcert.example.com. Its value is trustcert-verify=<your-token>. The server concatenates segmented TXT values before comparing them. DNS propagation can take time.
Add the token to a meta tag with name=trustcert-verification in the HTTPS homepage. The returned page must remain on the exact hostname.
Publish a plain-text token at /.well-known/trustcert-verification.txt. The file must return 200 and contain only the token.
Ownership is rechecked on every scan. When a token is missing the record becomes failing, with a seven-day grace period before suspension. Wildcards and private network targets are unsupported.
<meta name="trustcert-verification" content="YOUR_TOKEN" />