Let's Encrypt: How It Works

Re:Let's Encrypt: How It Works by stormbrew on Friday November 21, 2014 @07:11PM (#8644135)

Here's a question I haven't seen anyone ask: What about email servers (SMTP/IMAP)? I need a good cert for that more than I do for https, personally. I could obviously have a web server up just to succeed at the challenge/response and get a certificate, but I actually just try to avoid running webservers at all these days, to be honest. I'm also not 100% that certificate would work.

[ Parent | on HN ]

Re:Let's Encrypt: How It Works by yuriks on Friday November 21, 2014 @08:20PM (#8644325)

The technical overview mentions that there can be various different kinds of challenges, so presumably you could use a DNS based one or even an email based one if it's implemented.

[ Parent | on HN ]

Re:Let's Encrypt: How It Works by bifurcation on Friday November 21, 2014 @09:35PM (#8644510)

That's correct. Also, if you've got an A/AAAA record for the domain name in question, you could run an ACME client on that box that spins up a temporary web server. That's what the node-acme demo client does.

https://github.com/letsencrypt/node-acme/blob/master/lib/acm...

[ Parent | on HN ]