zunda @zundan@mastodon.zunda.ninja
Public

TLS証明書はドメイン（FQDN）の持ち主（サーバを運用する人）に発行するのでDNSかHTTPで検証すれば必要十分そうな気のする（ので知らないIPアドレスにNSレコードを向けちゃダメよね
https://letsencrypt.org/docs/challenge-types/

Challenge Types

When you get a certificate from Let’s Encrypt, our servers validate that you control the domain names in that certificate using “challenges,” as defined by the ACME standard. Most of the time, this validation is handled automatically by your ACME client, but if you need to make some more complex configuration decisions, it’s useful to know more about them. If you’re unsure, go with your client’s defaults or with HTTP-01.

letsencrypt.org

0
0
0

If you have a fediverse account, you can quote this note from your own instance. Search https://mastodon.zunda.ninja/users/zundan/statuses/114373286852770537 on your instance and quote it. (Note that quoting is not supported in Mastodon.)