

It seems to be a gap between intention ond implementation according to final paragraphs:
“This wasn’t the intention of the EU and UK negotiators of the agreement who said that citizens should broadly be able to continue their lives as before,” she adds.
She also points out that, unlike the UK, there is no statutory body in any member state to oversee correct implementation of the withdrawal agreement.
“Monitoring and support resources for UK citizens in the EU trying to enforce their rights are not commensurate with those in the UK, where there is a dedicated independent monitoring authority. Unfunded volunteers trying to help are overwhelmed,” says Golding.


So if I understand: hosters will be able to provide the proof at a time/schedule of their choosing. On actual servers a simpler, automated cert renew process without the need for them to hold nameserver API credentials.