←back to thread

Six day and IP address certificate options in 2025

(letsencrypt.org)
197 points SGran | 5 comments | 16 Jan 25 15:36 UTC | HN request time: 0s | source
1. remram ◴[16 Jan 25 22:10 UTC] No.42731543[source]▶
What are reasons to use a certificate for an IP? Why wouldn't you use a name?

Someone already mentioned that it's needed for Discovery of Designated Resolvers (DDR) for DNS-over-HTTPS. Anything else?

replies(2): >>42732172 #>>42758835 #
2. abrookewood ◴[16 Jan 25 23:16 UTC] No.42732172[source]▶
Names cost cash; maybe you don't need/want one.
replies(1): >>42758888 #
3. extraduder_ire ◴[19 Jan 25 17:02 UTC] No.42758835[source]▶
If you need https, but whatever device you want to serve to doesn't let you use hostnames.
replies(1): >>42764585 #
4. extraduder_ire ◴[19 Jan 25 17:06 UTC] No.42758888[source]▶
xip and https://nip.io are common workarounds for this.

I can't remember if one or both are in the mozilla list of public domain prefixes though.

5. remram ◴[20 Jan 25 03:06 UTC] No.42764585[source]▶
Like what?