Re:Another free CA as an alternative to Let's Encrypt
by rossy on Friday August 20, 2021 @10:07PM
(#28253445)
The "DNS provider with a better API" can be your own bind9 server on the same machine as certbot, updated with RFC 2136. Completely standard, no changing APIs, no 4th party, no maintenance. I set up a server like this at work and haven't touched it for a year and a half.
[ Parent
| on HN ]
Re:Another free CA as an alternative to Let's Encrypt
by gunapologist99 on Saturday August 21, 2021 @11:31AM
(#28257783)
bind hasn't exactly had a flawless security history...
(also hope that not touching it means you've automated security updates at least)