News for hackers. Stuff that matters.

A comment on Let's Encrypt: Reliability via Automated Renewal Information. Parent comment

Re:Let's Encrypt: Reliability via Automated Renewal Information by mholt on Friday March 24, 2023 @03:52PM (#35294539)
This is why Certbot should only be used temporarily to transition from legacy infrastructure. Ideally cert management (ACME client) needs to be baked into the server, like what Caddy does.
[ Parent | on HN ]
Re:Let's Encrypt: Reliability via Automated Renewal Information by adql on Friday March 24, 2023 @04:12PM (#35294788)
About the last thing security-wise that I want is for http server to control DNS record (which is required to have wildcard certs in LE)
[ Parent | on HN ]
Re:Let's Encrypt: Reliability via Automated Renewal Information by mholt on Friday March 24, 2023 @06:03PM (#35296272)
When done properly, this is less of an attack vector than you think (certainly much less than a phishing email).
[ Parent | on HN ]