← Back to context

Comment by timwis

15 hours ago

I agree. I was hoping for a few positive examples, but didn't see any. The only one I know of is the OIDC discovery endpoint.

10 comments

timwis

Reply
asdfasdfadsfs  15 hours ago

I would say acme-challenge is one of the most used ones. How else would one get SSL certificates today

  • echoangle  14 hours ago

    DNS TXT challenge for example. Also better because you can get wildcard certs.

    • ameliaquining  7 hours ago

      The great virtue of the in-band challenge types is that web servers can just handle them out of the box, without any need for a separate setup step that depends on your stack. I think this has done a heck of a lot to increase adoption of HTTPS.

    • sureglymop  11 hours ago

      Also, DNS-PERSIST-01 seems to be coming soon for Let's Encrypt, which should allow even people that can't easily dynamically update their DNS records to get wildcard certs. I assume this might become more widely used than HTTP-01 challenges.

      5 replies →