3 ms·

This is why Certbot should only be used temporarily to transition from legacy infrastructure. Ideally cert management (ACME client) needs to be baked into the s

by mholt 4y ago

This is why Certbot should only be used temporarily to transition from legacy infrastructure. Ideally cert management (ACME client) needs to be baked into the server, like what Caddy does.

adql 4y ago
About the last thing security-wise that I want is for http server to control DNS record (which is required to have wildcard certs in LE)
- mholt 4y ago
  When done properly, this is less of an attack vector than you think (certainly much less than a phishing email).