Jump to content

Recommended Posts

Hello,

Is it possible to disable the browser check mechanism for /.well-known/acme-challenge/* URLs? These addresses are used by the Let's Encrypt domain verification bot, which obviously would not solve the js/cookie challenge. To prevent potential abuse, the exemption could only be granted for static plaintext files under 200 bytes and/or rate-limited.

Link to post
Share on other sites
  • 2 months later...
  • 1 year later...

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...