As a security engineer I'm wary of tools that offer to issue certificates for you. You've got to trust that they won't keep a copy of your private key. ACME cli

As a security engineer I'm wary of tools that offer to issue certificates for you. You've got to trust that they won't keep a copy of your private key. ACME clients [1] generate keys on your device, which is the recommended way. But you're right. Issuing Let's Encrypt certificates on behalf of users could simplify the process even more. [1] https://docs.getlocalcert.net/acme-clients/#setting-txt-records https://docs.getlocalcert.net/acme-clients/#setting-txt-reco...