The DNS challenge is also the only challenge that has the skill to issue a wildcard certificate (as there is no way with an HTTP request show that I’m in control of all of the subdomains, not like a DNS wildcard record).