Hacker News Reader

Ah of course, a HN thread about TLS/SSL/webservers wouldn't be complete without someone exclaiming their love for Caddy. We get it, it's the bestest server ever.

View on HN

It's relevant to the discussion. No other server with ACME supports multiple issuers by default. It speaks directly to the point being made in the linked article (and other previous articles written by Scott).

For what it's worth, Traefik does allow you to change the server you talk to (it's just the staging server for LE they use in the example): https://doc.traefik.io/traefik/v2.0/https/acme/#caserverand

A quick google does suggest that at least one person has tried using ZeroSSL with Traefik: https://spad.uk/get-free-zerossl-certs-using-traefik/

Yes you can configure Traefik with other issuers, but it does not support having multiple configured at the same time and failing over between them in case something goes wrong. That's the point being made in the article. Caddy does this.

Reply on news.ycombinator.com