News for hackers. Stuff that matters.

A comment on Mail-in-a-Box – one-click, easy-to-deploy email server. Parent comment

Re:Mail-in-a-Box – one-click, easy-to-deploy email server by abverma on Monday November 28, 2016 @04:19AM (#13054314)
You might want to switch to Lets Encrypt or a paid SSL certificate provider.

https://en.wikipedia.org/wiki/StartCom#Criticism

https://blog.mozilla.org/security/2016/10/24/distrusting-new...

https://wiki.mozilla.org/CA:WoSign_Issues

[ Parent | on HN ]
Re:Mail-in-a-Box – one-click, easy-to-deploy email server by ProxCoques on Monday November 28, 2016 @05:05PM (#13058826)
LetsEncrypt needs port 80 open to the outside so that it can verify/renew certificates. I don't have port 80 open on the mail server though.
[ Parent | on HN ]
Re:Mail-in-a-Box – one-click, easy-to-deploy email server by Whitestrake on Monday November 28, 2016 @06:53PM (#13059463)
LetsEncrypt actually has multiple options available for validation. Only one challenge type, http-01, requires port 80 to be open. Another, tls-sni-01, requires port 443. dns-01 requires configuration of your DNS provider. I personally make use of tls-sni-01 and dns-01 in different situations.
[ Parent | on HN ]