3 ms·
The solution is for Let's Encrypt or a similar CA to start issuing certificates for direct IP addresses.
by Sephr 8y ago
The solution is for Let's Encrypt or a similar CA to start issuing certificates for direct IP addresses.
- parliament32 8y agoThe parent was talking about a device on a home network, I definitely do not want a CA issuing a trusted cert for 192.168.0.1
- Sephr 8y agoObviously I'm only referring to public IP addresses. Let's Encrypt can't attest anything about local IPs.
- parliament32 8y agoWhich is a good idea, until we remember that most residential "local" networks have dynamic IPs. Honestly the best way to deal with this is to have a dynamic dns record pointing to a (sub)domain you own, then get a cert through that.