{"slug": "acme-dns", "name": "acme-dns", "category": "networking", "category_name": "Networking and VPN", "description": "", "recommenders": 3, "commenters": 4, "warners": 0, "score": 2.939, "rising": -0.98, "first": "2025-12-15", "latest": "2026-07-09", "why": "it is pretty easy to set up an acme-dns server to handle it", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 3, "neutral": 1, "compare": 0, "warn": 0}, "spark": [0, 1, 0, 0, 0, 0, 0, 0, 2, 0, 0, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "it is pretty easy to set up an acme-dns server to handle it", "kind": "", "icon": true, "domain": null, "github_repo": "github.com/acme-dns/acme-dns", "official_url": "https://github.com/acme-dns/acme-dns", "pricing": "", "aliases": ["acme-dns"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 781614096, "item_id": 48850881, "url": "https://news.ycombinator.com/item?id=48850881", "by": "isomorphic", "date": "2026-07-09", "stance": "recommend", "quote": "I do this exactly, using ACME DNS", "excerpt": "I do this exactly, using ACME DNS: https://github.com/acme-dns/acme-dns CAUTION, though, the last time I downloaded a binary release, ClamAV triggered on it, so I kept my old version which worked. I was using the 1.0 series (without any problems!), and now it seems the project has picked up development again with a 2.0 series.", "context": "", "use_case": "DNS-01 ACME challenges", "switched_from": "", "story": "TLS certificates for internal services done right"}, {"id": 781564785, "item_id": 48847799, "url": "https://news.ycombinator.com/item?id=48847799", "by": "throw0101d", "date": "2026-07-09", "stance": "recommend", "quote": "There are DNS servers written strictly focused on this use case:", "excerpt": "> I use the acme dns-1 challenge on my public domain. See also perhaps DNS aliasing in case you are not able to dynamically update your 'primary' domain, but can update a secondary or sub-domain: * https://github.com/acmesh-official/acme.sh/wiki/DNS-alias-mode So if \"example.com\" is control by Corporate IT, and they don't want 'random' folks fiddling with it, then you can create a \"dnsauth.example.com\" and point the ", "context": "", "use_case": "ACME DNS challenge server", "switched_from": "", "story": "TLS certificates for internal services done right"}, {"id": 740427280, "item_id": 46276705, "url": "https://news.ycombinator.com/item?id=46276705", "by": "cortesoft", "date": "2025-12-15", "stance": "recommend", "quote": "it is pretty easy to set up an acme-dns server to handle it", "excerpt": "If you are using a non-standard DNS provider that doesn\u2019t have integration with certbot or cert-manager or whatever you are using, it is pretty easy to set up an acme-dns server to handle it https://github.com/joohoi/acme-dns", "context": "", "use_case": "DNS challenge for certificates", "switched_from": "", "story": "It seems that OpenAI is scraping [certificate transparency] logs"}]}], "caveats": [], "who": [], "tags": [], "use_cases": ["dns-01 acme challenges", "acme dns challenge server", "dns challenge for certificates"], "compared": [], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=48846995", "title": "TLS certificates for internal services done right", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=47542644", "title": "Installing a Let's Encrypt TLS Certificate on a Brother Printer with Certbot", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46274478", "title": "It seems that OpenAI is scraping [certificate transparency] logs", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {"recommend": 1}, "2026-01": {}, "2026-02": {}, "2026-03": {"neutral": 1}, "2026-04": {}, "2026-05": {}, "2026-06": {}, "2026-07": {"recommend": 2}, "2026-08": {}, "2026-09": {}, "2026-10": {}}, "quotes": [{"id": 781614096, "item_id": 48850881, "url": "https://news.ycombinator.com/item?id=48850881", "by": "isomorphic", "date": "2026-07-09", "stance": "recommend", "quote": "I do this exactly, using ACME DNS", "excerpt": "I do this exactly, using ACME DNS: https://github.com/acme-dns/acme-dns CAUTION, though, the last time I downloaded a binary release, ClamAV triggered on it, so I kept my old version which worked. I was using the 1.0 series (without any problems!), and now it seems the project has picked up development again with a 2.0 series.", "context": "", "use_case": "DNS-01 ACME challenges", "switched_from": "", "story": "TLS certificates for internal services done right"}, {"id": 781564785, "item_id": 48847799, "url": "https://news.ycombinator.com/item?id=48847799", "by": "throw0101d", "date": "2026-07-09", "stance": "recommend", "quote": "There are DNS servers written strictly focused on this use case:", "excerpt": "> I use the acme dns-1 challenge on my public domain. See also perhaps DNS aliasing in case you are not able to dynamically update your 'primary' domain, but can update a secondary or sub-domain: * https://github.com/acmesh-official/acme.sh/wiki/DNS-alias-mode So if \"example.com\" is control by Corporate IT, and they don't want 'random' folks fiddling with it, then you can create a \"dnsauth.example.com\" and point the ", "context": "", "use_case": "ACME DNS challenge server", "switched_from": "", "story": "TLS certificates for internal services done right"}, {"id": 760727521, "item_id": 47545470, "url": "https://news.ycombinator.com/item?id=47545470", "by": "throw0101a", "date": "2026-03-27", "stance": "neutral", "quote": "purpose-build DNS servers for this purpose", "excerpt": "> That looks like a viable solution since it requires a one-time setup on the main domain and ongoing access to the second (validation) domain. At my last job we deployed a special sub-domain for that purpose (dnsauth.example.com) and manually created CNAMEs on our main (sub-)domains to point to it. We deployed a single (no-HA) externally exposed BIND server with a bunch of scripts that folks could connect to (we had", "context": "", "use_case": "", "switched_from": "", "story": "Installing a Let's Encrypt TLS Certificate on a Brother Printer with Certbot"}, {"id": 740427280, "item_id": 46276705, "url": "https://news.ycombinator.com/item?id=46276705", "by": "cortesoft", "date": "2025-12-15", "stance": "recommend", "quote": "it is pretty easy to set up an acme-dns server to handle it", "excerpt": "If you are using a non-standard DNS provider that doesn\u2019t have integration with certbot or cert-manager or whatever you are using, it is pretty easy to set up an acme-dns server to handle it https://github.com/joohoi/acme-dns", "context": "", "use_case": "DNS challenge for certificates", "switched_from": "", "story": "It seems that OpenAI is scraping [certificate transparency] logs"}]}