DNS TXT challenge for example. Also better because you can get wildcard certs.
replyThe great virtue of the in-band challenge types is that web servers can just handle them out of the box, without any need for a separate setup step that depends on your stack. I think this has done a heck of a lot to increase adoption of HTTPS.
replyAlso, DNS-PERSIST-01 seems to be coming soon for Let's Encrypt, which should allow even people that can't easily dynamically update their DNS records to get wildcard certs. I assume this might become more widely used than HTTP-01 challenges.
replyI wish someone would write a blog post about the difference between DNS registrars and DNS hosts, because I've seen people assume they need to use a registrar that has an API in order to change their DNS records programmatically. I used to assume that too.
reply- registrars control NS records, however these can be changed
- NS records control other records
- registrars can also use their own nameservers to manage your DNS
replyYeah, so basically it’s fine as long as your registrar lets you set your own NS. Are there ones where you can’t do that?
replyapparently, networksolutions https://news.ycombinator.com/item?id=39673213
reply