authentik vs DNSimple

Two threads and now a third. The official CLI launched in May with multi-account contexts, shell completion and structured output, then gained browser-based login in June so no API token has to be generated or pasted. Domain Trustee, from late May, supplies a compliant local contact so customers can register restricted country-code TLDs without a local presence. The newest post closes something older than both: a three-year migration is complete and every DNS query for a customer's zones now travels exclusively across infrastructure DNSimple builds, owns and operates.

The through-line is removing prerequisites — a token, a local presence, a third party in the query path — rather than adding product surface. The edge migration is the same instinct applied to the company's own dependencies: a registrar whose resolution ran partly on someone else's anycast could not fully own its availability story, and now it does. Automation remains the consistent audience for everything above the infrastructure line, with the CLI, structured output and the async Rust client all pointing at DNS managed from pipelines.

Owning the edge is the kind of investment that gets monetized next: expect DNSimple to start attaching claims it could not previously make — latency, availability, or region-level routing control — to the resolution service. What the post does not say is whether any of that reaches the product as configurable behaviour rather than background improvement.