I would prefer to use TLS-SNI, but I’m not using a “major provider”. I know I’m safe from the issue, as I’m hosting on my own IP. Could LE consider supporting a CAA entry like CAA 0 issue "letsencrypt.org; tlssni=yes" to specify that tls-sni is allowed for this domain?

TLS-SNI via CAA

jsha January 11, 2018, 7:20pm 2

This is an interesting idea! I’ll share it with the team and see what people think.

2 Likes

Topic		Replies	Views
The future of CAA Feature Requests	6	1217	June 22, 2018
2018.01.11 Update Regarding ACME TLS-SNI and Shared Hosting Infrastructure Incidents	3	72685	January 13, 2018
PROD Support for RFC8657 CAA constraints for accountURI and validationmethods Feature Requests	23	2250	August 22, 2022
2018.01.09 Issue with TLS-SNI-01 and Shared Hosting Infrastructure Incidents	4	60901	January 12, 2018
How to only allow http-01 or dns-01? Help	5	2896	February 4, 2018