Remote

Ryan Bolger

@rmbolger@mastodon.social

mastodon 4.8.0-nightly.2026-10-06

Dad, tech enthusiast, casual gamer, a cappella music lover, and DDI Architect at Alight Solutions

0 Followers

0 Following

6 Posts

Joined October 28, 2022

Github:

https://github.com/rmbolger

Blog:

https://www.dvolve.net/

Posh-ACME:

https://poshac.me/docs/latest/

Ryan Bolger @rmbolger@mastodon.social

· 4mo ago

Replying to

@i@toot.pouyan.net @aral@mastodon.ar.al @EUCommission@ec.social-network.europa.eu Not really comparable when the free option is limited to a single domain SAN (with optional www variant) and no wildcards. It’s just a loss leader from a commercial CA trying to attract new paying customers.

Ryan Bolger @rmbolger@mastodon.social

· 5mo ago

Replying to

@nicksilkey@hachyderm.io I’m pretty sure there’s an RFC stating no less than 2, but not sure what it is. From practical experience, the max is dictated by the TLD. Some ccTLDs I’ve used allow no more than 4.

Ryan Bolger @rmbolger@mastodon.social

· 6mo ago

Replying to

@tykling Hard agree but it’s difficult for Windows users since BIND abandoned support for the platform. “Just use WSL” isn’t really a solution particularly in corporate environments. I’m still clinging on to my Windows-native copy of 9.17.5. But it’s eventually going to stop being useful as newer versions leave it behind.

Ryan Bolger @rmbolger@mastodon.social

· 5mo ago

Replying to

@adrian@mastodon.offerman.com > requirement to basically continuously prove domain control This should prove less of a hassle once ACME CAs start supporting dns-persist-01 in production. It won’t be necessary to modify a TXT record on every renewal anymore. Just once per ACME account per identifier (or less if you allow wildcards). https://letsencrypt.org/2026/02/18/dns-persist-01

Let's Encrypt

DNS-PERSIST-01: A New Model for DNS-based Challenge Validation

When you request a certificate from Let’s Encrypt, our servers validate that you control the hostnames in that certificate using ACME challenges. For subscribers who need wildcard certificates or who prefer not to expose infrastructure to the public Internet, the DNS-01 challenge type has long been the only choice. DNS-01 works well. It is widely supported and battle-tested, but it comes with operational costs: DNS propagation delays, recurring DNS updates at renewal time, and automation that of

Ryan Bolger @rmbolger@mastodon.social

· 5mo ago

Replying to

@Blort@social.tchncs.de @gpumoto@mastodon.social Certbot is an ACME client (one of many) that let you obtain certificates from an ACME compatible certificate authority. Let’s Encrypt is the most popular free ACME compatible CA, but there are others.

Ryan Bolger @rmbolger@mastodon.social

· 3mo ago

Replying to

@kdb424@woof.tech If you like the idea of managing your zones via git, have a look at DNSControl. Many providers supported. Built with CI/CD in mind. https://dnscontrol.org/

dnscontrol.org