| mastodon.social/@GuidoKostons | https://mastodon.social/@GuidoKostons |
| mastodon.social/@GuidoKostons | https://mastodon.social/@GuidoKostons |

Soms denk je, kan het nog gekker? We gaan het beheer van het platform waarop DigiD draait overlaten aan een Amerikaans bedrijf. Dit was niet de bedoeling, maar het gebeurt nu toch. Maar het blijkt dat het nog erger kan. DigiD is nog wel van ons, maar het beheer van de computers wordt Amerikaans. Maar wat nou als je die stap overslaat, en alles door Amerikanen laat doen? Dat is wat de belastingdienst nu van plan is met de btw.
This new wildcard-capable DNS challenge from LE is looking really good: https://letsencrypt.org/2026/02/18/dns-persist-01.html
For me, it's going to be a way to finally fully automate my LE cert renewals. Up to now it was always partially manual, because Strato doesn't support an API for record updates.

When you request a certificate from Let’s Encrypt, our servers validate that you control the hostnames in that certificate using ACME challenges. For subscribers who need wildcard certificates or who prefer not to expose infrastructure to the public Internet, the DNS-01 challenge type has long been the only choice. DNS-01 works well. It is widely supported and battle-tested, but it comes with operational costs: DNS propagation delays, recurring DNS updates at renewal time, and automation that often requires distributing DNS credentials throughout your infrastructure.
Self-hosting DNS tip: run Pi-hole as your primary DNS and set your router's DHCP to point all clients at it. Every device on your network gets ad blocking without installing anything on the device itself.
Works for smart TVs, phones, IoT devices, guests.
#selfhosted #pihole #dns #privacy #homelab #foss #opensource