Re:Let's Encrypt posts letter from executive director
by iuafhiuah on Tuesday December 06, 2022 @10:55AM
(#33882071)
That's an interesting solution to mitigating risk. I wasn't aware that LE would follow a CNAME to a different TXT record.
Although it does require an additional NS which is an additional maintenance overhead - that is preferable to leaving automated services sitting around with write access to important domains. At least until I can stop regularly writing DNS records.
Although it does require an additional NS which is an additional maintenance overhead - that is preferable to leaving automated services sitting around with write access to important domains. At least until I can stop regularly writing DNS records.