4 ms·

You can do it with an NS record, ie _acme_challenge.realdomain.com pointing to the DNS server that you can program to serve the challenge response. No need to m

You can do it with an NS record, ie _acme_challenge.realdomain.com pointing to the DNS server that you can program to serve the challenge response. No need to make a CNAME and involve an additional domain in the middle.

aflukasz 1y ago
Yeah, but then you can just as well use http-01 with like same effort.
- gruez 1y ago
  no, because dns supports wildcard certificates, unlike http.
  - aflukasz 1y ago
    Ah, good point.
  - cpach 1y ago
    dns-01 is also good for services on a private network.