4 ms·
I use the NS approach too at the moment, it does feel like the natural way to do it with DNS. One downside is if your cloud provider charges per zone you end up
by dgl 5y ago
I use the NS approach too at the moment, it does feel like the natural way to do it with DNS. One downside is if your cloud provider charges per zone you end up paying for twice as many zones.
- chrismorgan 5y agoThat’d be no different with the CNAME alias technique, right? I’m not seeing any reason for the CNAME technique; seems like the NS technique should be every bit as good, without needing another domain name (which costs money and is another moving part). I’d like to know if I’m misreading anything.
- throw0101a 5y agoYou can use sub-domains as well: _acme-challenge.example.com -> _acme-challenge.DNSAUTH.example.com, _acme-challenge.foo.example.com -> _acme-challenge.foo.dnsauth.example.com. You can then have a small VM handle answering DNS queries just for dnsauth.example.com. Folks have written servers to do just this: * https://github.com/joohoi/acme-dns https://github.com/joohoi/acme-dns