misk@sopuli.xyz to Technology@lemmy.worldEnglish · 10 hours agoSysadmins slam Apple’s SSL/TLS cert lifespan cutswww.theregister.comexternal-linkmessage-square29fedilinkarrow-up193arrow-down17
arrow-up186arrow-down1external-linkSysadmins slam Apple’s SSL/TLS cert lifespan cutswww.theregister.commisk@sopuli.xyz to Technology@lemmy.worldEnglish · 10 hours agomessage-square29fedilink
minus-squarefarcaller@fstab.shlinkfedilinkEnglisharrow-up13·8 hours agoYou can delegate to isolated nameservers with DNS-01, there’s no need to have control over the primary zone: https://www.eff.org/deeplinks/2018/02/technical-deep-dive-securing-automation-acme-dns-challenge-validation
minus-squareAntithetical@lemmy.deedium.nllinkfedilinkEnglisharrow-up12arrow-down1·7 hours agoYes, and that is where we enter the complicated territories…
minus-squarefarcaller@fstab.shlinkfedilinkEnglisharrow-up3arrow-down2·6 hours agoHow complicated is it to have a CNAME? /s
You can delegate to isolated nameservers with DNS-01, there’s no need to have control over the primary zone: https://www.eff.org/deeplinks/2018/02/technical-deep-dive-securing-automation-acme-dns-challenge-validation
Yes, and that is where we enter the complicated territories…
How complicated is it to have a CNAME? /s