undefined | Better HN

0 pointsArnavion9mo ago0 comments

You can do it with an NS record, ie _acme_challenge.realdomain.com pointing to the DNS server that you can program to serve the challenge response. No need to make a CNAME and involve an additional domain in the middle.

0 comments

aflukasz9mo ago

Yeah, but then you can just as well use http-01 with like same effort.

gruez9mo ago

no, because dns supports wildcard certificates, unlike http.

2 more replies

j / k navigate · click thread line to collapse

0 comments

aflukasz9mo ago

Yeah, but then you can just as well use http-01 with like same effort.

gruez9mo ago

no, because dns supports wildcard certificates, unlike http.

2 more replies

j / k navigate · click thread line to collapse