[Acme] ACME CAA record delegation

2025-01-25 Thread Ramon Wehrli
*Hello Everyone,* Over the past few months, I’ve become increasingly interested in the ACME ecosystem. One technology I find particularly fascinating is ACME CAA records, which I believe are significantly underutilized. Specifically, the account binding feature has great potential to enhance secu

[Acme] Re: Validation methods and CAA for IP certs

2025-01-25 Thread Ramon Wehrli
Hello, >From my understanding, one of the main use cases for this could be hosting DoT or DoH DNS servers. By utilizing IP address certificates, clients can bootstrap connections to these servers without relying on insecure DNS requests. Setting up rDNS might seem a bit more complex, but with the

[Acme] ACME CAA record delegation

2025-01-25 Thread Ramon Wehrli
*Hello Everyone,* Over the past few months, I’ve become increasingly interested in the ACME ecosystem. One technology I find particularly fascinating is ACME CAA records, which I believe are significantly underutilized. Specifically, the account binding feature has great potential to enhance secu