undefined | Better HN

0 pointscpach7mo ago0 comments

With dns-01, multiple servers could, independently of each other, fetch a certificate for the same set of hostnames. Not sure if it’s a good idea though.

0 comments

lmz7mo ago

Multiple keys and certs for the same hostname? Will the CA even issue that?

cpachOP7mo ago

I guess it depends on the CA, but some do. Let’s Encrypt does, for example. I guess it’s useful for HA deployments, where load balancers might be spread out across multiple datacenters and stuff like that.

NB that rate limits apply https://letsencrypt.org/docs/rate-limits/

j / k navigate · click thread line to collapse

0 pointscpach7mo ago0 comments

With dns-01, multiple servers could, independently of each other, fetch a certificate for the same set of hostnames. Not sure if it’s a good idea though.

0 comments

lmz7mo ago

Multiple keys and certs for the same hostname? Will the CA even issue that?

cpachOP7mo ago

NB that rate limits apply https://letsencrypt.org/docs/rate-limits/

j / k navigate · click thread line to collapse