misk@sopuli.xyz to Technology@lemmy.worldEnglish · 5 hours agoSysadmins slam Apple’s SSL/TLS cert lifespan cutswww.theregister.comexternal-linkmessage-square20fedilinkarrow-up151arrow-down14
arrow-up147arrow-down1external-linkSysadmins slam Apple’s SSL/TLS cert lifespan cutswww.theregister.commisk@sopuli.xyz to Technology@lemmy.worldEnglish · 5 hours agomessage-square20fedilink
minus-squarefarcallerlinkfedilinkEnglisharrow-up7·3 hours agoYou can delegate to isolated nameservers with DNS-01, there’s no need to have control over the primary zone: https://www.eff.org/deeplinks/2018/02/technical-deep-dive-securing-automation-acme-dns-challenge-validation
minus-squareAntithetical@lemmy.deedium.nllinkfedilinkEnglisharrow-up10·2 hours agoYes, and that is where we enter the complicated territories…
minus-squarefarcallerlinkfedilinkEnglisharrow-up1arrow-down1·46 minutes agoHow complicated is it to have a CNAME? /s
You can delegate to isolated nameservers with DNS-01, there’s no need to have control over the primary zone: https://www.eff.org/deeplinks/2018/02/technical-deep-dive-securing-automation-acme-dns-challenge-validation
Yes, and that is where we enter the complicated territories…
How complicated is it to have a CNAME? /s