News for hackers. Stuff that matters.
Re:It seems that OpenAI is scraping [certificate transparenc... by Ajedi32 on Monday December 15, 2025 @12:32PM (#46277560)
I hadn't heard of Agnos before, interesting alternative to ACME-DNS.

Looking at the README, is the idea that the certificates get generated on the DNS server itself? Not by the ACME client on each machine that needs a certificate? That seems like a confusing design choice to me. How do you get the certificate back to the web server that actually needs it? Or is the idea that you'd have a single server which acts as both the DNS server and the web server?

There are no comments on this comment yet.