Certificate for public IP without domain name

Issuance Tech
86

https://1.1.1.1/ cert was issued by DigiCert (not LetsEncrypt)

2 Likes
87

I think IP address certificates have to be supported eventually. They are pretty much required for running a DNS-over-HTTPS server because with hostnames you run into a chicken-or-egg problem on a DNS server.

A DNS challenge could be done on the reverse zone, and HTTP is even simpler than for hostnames.

88

Thatā€™s definitely an important use case, but for example Cloudflareā€™s is issued by DigiCert, so it doesnā€™t necessarily absolutely have to be done by Letā€™s Encrypt.

89

Iā€™m sure you can get IP certicates from other CAs if you pester them enough. Iā€™m worried that CAs will probably attempt to charge a premium for them, which could hinder adoption of DoH.

1 Like
91

It is possible to purchase certificates for IP addresses, but not from Letā€™s Encrypt. Letā€™s Encrypt may offer IP address certificates in the future, but as of September 2018 we do not.

2 Likes