misk@sopuli.xyz to Technology@lemmy.worldEnglish · 7 hours agoSysadmins slam Apple’s SSL/TLS cert lifespan cutswww.theregister.comexternal-linkmessage-square24fedilinkarrow-up176arrow-down17
arrow-up169arrow-down1external-linkSysadmins slam Apple’s SSL/TLS cert lifespan cutswww.theregister.commisk@sopuli.xyz to Technology@lemmy.worldEnglish · 7 hours agomessage-square24fedilink
minus-squarefarcaller@fstab.shlinkfedilinkEnglisharrow-up10·5 hours agoYou can delegate to isolated nameservers with DNS-01, there’s no need to have control over the primary zone: https://www.eff.org/deeplinks/2018/02/technical-deep-dive-securing-automation-acme-dns-challenge-validation
minus-squareAntithetical@lemmy.deedium.nllinkfedilinkEnglisharrow-up11arrow-down1·4 hours agoYes, and that is where we enter the complicated territories…
minus-squarefarcaller@fstab.shlinkfedilinkEnglisharrow-up1arrow-down2·3 hours agoHow complicated is it to have a CNAME? /s
You can delegate to isolated nameservers with DNS-01, there’s no need to have control over the primary zone: https://www.eff.org/deeplinks/2018/02/technical-deep-dive-securing-automation-acme-dns-challenge-validation
Yes, and that is where we enter the complicated territories…
How complicated is it to have a CNAME? /s