The idea is to basically offer a free subdomain service (ssl.fun) in conjunction with solving the DNS-01 challenge.
This would automate the existing practice of using a e.g. a public local.domain.com A record pointing to 127.0.0.1
The difference in this approach in regards to previous attempts is that the private key would not be compromised, as the client is issuing it directly.
Happy to receive feedback on this idea :-) As this would run into the 20 certs-per-domain LE limit quickly it needs some blessing before I can offer this service publicly.
https://community.letsencrypt.org/t/rfc-a-way-to-use-valid-h...
The idea is to basically offer a free subdomain service (ssl.fun) in conjunction with solving the DNS-01 challenge.
This would automate the existing practice of using a e.g. a public local.domain.com A record pointing to 127.0.0.1
The difference in this approach in regards to previous attempts is that the private key would not be compromised, as the client is issuing it directly.
Happy to receive feedback on this idea :-) As this would run into the 20 certs-per-domain LE limit quickly it needs some blessing before I can offer this service publicly.