Let's Encrypt is offering 6-day and IP address certs

Re:Let's Encrypt is offering 6-day and IP address certs by tasuki on Thursday January 16, 2025 @05:52PM (#42731926)

> To someone like me with hobby-level serving needs, the 90 day certificate life is pretty inconvenient, despite having automation set up.

I also have hobby-level serving needs. I've been using LetsEncrypt since whenever it was they started. I have two top level domains and a whole lot of subdomains.

I've never had to babysit certificate renewal, nor had to log in manually to fix anything. Not once. How comes?

[ Parent | on HN ]

Re:Let's Encrypt is offering 6-day and IP address certs by 5d41402abc4b on Friday January 17, 2025 @03:37AM (#42735318)

If your server is not accessible from the internet you need to use DNS based authentication for which you need to have a DNS API key lying around on your server which is a significant risk.

[ Parent | on HN ]

Re:Let's Encrypt is offering 6-day and IP address certs by erincandescent on Friday January 17, 2025 @10:45AM (#42738869)

Put the ACME challenges in their own DNS zones. Grant the key permission to only that zone. Risk mitigated.

[ Parent | on HN ]

Re:Let's Encrypt is offering 6-day and IP address certs by crtasm on Friday January 17, 2025 @12:06PM (#42740433)

Is this possible on Porkbun?

[ Parent | on HN ]

Re:Let's Encrypt is offering 6-day and IP address certs by ryandrake on Friday January 17, 2025 @10:49AM (#42738951)

Weird. It's always been flaky for me, so I thought it was just the usual run-of-the-mill crappy software and that everyone just deals with it. I can't imagine what the bug might be in a 6 line shell script that just runs certbot and then restarts a bunch of services.

[ Parent | on HN ]