On 9/18/26 17:29, Theo de Raadt wrote:
> Stuart Henderson <stu@spacehopper.org> wrote:
>
>> It would seem reasonable for acme-client to run a user script to update
>> zones - on a pure-base install that script could write to a file which
>> is $INCLUDE'd in a zone and reload/notify - otherwise poke at a DNS
>> provider's API or nsupdate.
> The privsep will get in the way.  Probably requires a good amount of
> surgery.  But it will be worth it to have a way to perform actions,
> maybe also for other things?
with that new 47 days certificate lifespan the way to automate it become 
a must. sorry, just my 0.005 cents