News for hackers. Stuff that matters.

A comment on Let's Encrypt is offering 6-day and IP address certs. Parent comment

Re:Let's Encrypt is offering 6-day and IP address certs by 5d41402abc4b on Friday January 17, 2025 @03:37AM (#42735318)
If your server is not accessible from the internet you need to use DNS based authentication for which you need to have a DNS API key lying around on your server which is a significant risk.
[ Parent | on HN ]
Re:Let's Encrypt is offering 6-day and IP address certs by erincandescent on Friday January 17, 2025 @10:45AM (#42738869)
Put the ACME challenges in their own DNS zones. Grant the key permission to only that zone. Risk mitigated.
[ Parent | on HN ]
Re:Let's Encrypt is offering 6-day and IP address certs by crtasm on Friday January 17, 2025 @12:06PM (#42740433)
Is this possible on Porkbun?
[ Parent | on HN ]