diff --git a/CHANGELOG.md b/CHANGELOG.md
index df95c2d36..728c938fb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -17,6 +17,7 @@ Certbot adheres to [Semantic Versioning](http://semver.org/).
 * Warn when using deprecated acme.challenges.TLSSNI01
 * Log warning about TLS-SNI deprecation in Certbot
 * Stop preferring TLS-SNI in the Apache, Nginx, and standalone plugins
+* OVH DNS plugin now relies on Lexicon>=2.7.14 to support HTTP proxies
 
 ### Fixed
 
diff --git a/certbot-dns-ovh/setup.py b/certbot-dns-ovh/setup.py
index 1f3acbf62..89ff317d9 100644
--- a/certbot-dns-ovh/setup.py
+++ b/certbot-dns-ovh/setup.py
@@ -11,7 +11,7 @@ version = '0.28.0.dev0'
 install_requires = [
     'acme>=0.21.1',
     'certbot>=0.21.1',
-    'dns-lexicon>=2.7.3', # Correct OVH integration tests
+    'dns-lexicon>=2.7.14', # Correct proxy use on OVH provider
     'mock',
     'setuptools',
     'zope.interface',
diff --git a/tools/dev_constraints.txt b/tools/dev_constraints.txt
index 00ecee03e..380d49cb3 100644
--- a/tools/dev_constraints.txt
+++ b/tools/dev_constraints.txt
@@ -12,7 +12,7 @@ botocore==1.7.41
 cloudflare==1.5.1
 coverage==4.4.2
 decorator==4.1.2
-dns-lexicon==2.7.3
+dns-lexicon==2.7.14
 dnspython==1.15.0
 docutils==0.14
 execnet==1.5.0