shellalexander

Member

Joined:: Sep 2024
Last seen:: 7mo ago

Posts: 2
Threads: 0
Likes: 0
Reputation: 0

What do you use for SSL certificate automation? · General Discussion

Vanessa10 said:

No HTTP listener exposed for validation at all.

Same reason we run DNS validation. Attack surface. HTTP-01 means something answers 80/443 from the internet with a predictable path. We stopped doing that in 2019.

For EU/APAC split I run two acme.sh instances with shared acc...

shellalexander 8mo ago

What do you use for SSL certificate automation? · General Discussion

Acme.sh. 47 Gbps attack last month, filtering layer 3/4/7. Anycast for distribution, scrubbing centers in EU/APAC. Certificate renewal must not depend on 200 MB Python stack.