>Redirecting traffic is much easier than generating certificates so a valid cert held by a bad actor can be a serious vulnerability. This is bullshit. If you c

>Redirecting traffic is much easier than generating certificates so a valid cert held by a bad actor can be a serious vulnerability. This is bullshit. If you can redirect traffic you can almost always create a certificate unless you can only redirect a very limited set of traffic. Redirecting traffic is literally all you need in order to be able to use certbot to generate a new cert.