On Tue, Nov 03, 2015 at 05:11:37PM +0100, elrippo wrote:
> This will probably get into Debian based Distros by April 2016, so it
> should be rather easy to get a lentsencrypt cert for those Distros via
> apt management without the hassle of compiling and building on your own,
> hopefully.
It will probably integrated into Apache and Nginx, where a common
"proof" will be control of port 443 on the machine.
However, for port 25, proofs are more complicated, and there's a
strong possibility of automated cert/key rotation breaking DANE.
So the distribution maintainers need to exercise great care, and
explicit integration with the MTA/MSA may be necessary.
--
Viktor.
