Another free CA as an alternative to Let's Encrypt

Re:Another free CA as an alternative to Let's Encrypt by adambatkin on Friday August 20, 2021 @08:38AM (#28245314)

I do the challenge verification using DNS and Route 53, and the process has permission to update the challenge record and nothing else. So what you are describing is definitely possible.

[ Parent | on HN ]

Re:Another free CA as an alternative to Let's Encrypt by akerl_ on Friday August 20, 2021 @09:36AM (#28245757)

I looked into this previously and was unhappy to learn that Route53 doesn’t allow permissions based on specific records. The most granular permissions were for a full zone at the time.

[ Parent | on HN ]