diff --git a/certbot-dns-rfc2136/certbot_dns_rfc2136/_internal/dns_rfc2136.py b/certbot-dns-rfc2136/certbot_dns_rfc2136/_internal/dns_rfc2136.py
index a3a943660..57e9506f2 100644
--- a/certbot-dns-rfc2136/certbot_dns_rfc2136/_internal/dns_rfc2136.py
+++ b/certbot-dns-rfc2136/certbot_dns_rfc2136/_internal/dns_rfc2136.py
@@ -1,13 +1,3 @@
-# type: ignore
-# pylint: disable=no-member
-# Many attributes of dnspython are now dynamically defined which causes both
-# mypy and pylint to error about accessing attributes they think do not exist.
-# This is the case even in up-to-date versions of mypy and pylint which as of
-# writing this are 0.790 and 2.6.0 respectively. This problem may be fixed in
-# dnspython 2.1.0. See https://github.com/rthalley/dnspython/issues/598. For
-# now, let's disable these checks. This is done at the very top of the file
-# like this because "type: ignore" must be the first line in the file to be
-# respected by mypy.
 """DNS Authenticator using RFC 2136 Dynamic Updates."""
 import logging
 
diff --git a/tools/dev_constraints.txt b/tools/dev_constraints.txt
index e54ebea92..f5140f9c7 100644
--- a/tools/dev_constraints.txt
+++ b/tools/dev_constraints.txt
@@ -26,13 +26,7 @@ coverage==4.5.4
 decorator==4.4.1
 deprecated==1.2.10
 dns-lexicon==3.3.17
-# There is no version of dnspython that works on both Python 2 and Python 3.9.
-# To work around this, we make use of the fact that subject to other
-# constraints, pip will install the newest version of a package while ignoring
-# versions that don't support the version of Python being used. The result of
-# this is dnspython 2.0.0 is installed in Python 3 while dnspython 1.16.0 is
-# installed in Python 2.
-dnspython<=2.0.0
+dnspython==2.1.0
 docker==4.3.1
 docker-compose==1.26.2
 docker-pycreds==0.4.0