News for hackers. Stuff that matters.

A comment on Nginx Introduces Native Support for Acme Protocol. Parent comment

Re:Nginx Introduces Native Support for Acme Protocol by Arnavion on Wednesday August 13, 2025 @02:23PM (#44891993)
You can do it with an NS record, ie _acme_challenge.realdomain.com pointing to the DNS server that you can program to serve the challenge response. No need to make a CNAME and involve an additional domain in the middle.
[ Parent | on HN ]
Re:Nginx Introduces Native Support for Acme Protocol by aflukasz on Wednesday August 13, 2025 @02:39PM (#44892174)
Yeah, but then you can just as well use http-01 with like same effort.
[ Parent | on HN ]
Re:Nginx Introduces Native Support for Acme Protocol by gruez on Wednesday August 13, 2025 @02:56PM (#44892362)
no, because dns supports wildcard certificates, unlike http.
[ Parent | on HN ]
Re:Nginx Introduces Native Support for Acme Protocol by aflukasz on Wednesday August 13, 2025 @03:16PM (#44892609)
Ah, good point.
[ Parent | on HN ]
Re:Nginx Introduces Native Support for Acme Protocol by cpach on Wednesday August 13, 2025 @04:41PM (#44893586)
dns-01 is also good for services on a private network.
[ Parent | on HN ]