Let's Encrypt : We Issued Our First IP Address Certificate !

xemaps

Since 1st July 2025, Let's Encrypt can issue IP Address Certificate !

To have your first IP CERTIFICATE go to staging
A good usage is Securing remote access IP like device, VPS host, RDP, ...
So good luck LETSENCRYPT !
Source LetsEncrypt.org

Intelpentiumm

Great news

Levi

On another hand malware C&C's will also celebrate.

Void

Make use of it while it lasts 🤣

theraw

@xemaps said:

Since 1st July 2025, Let's Encrypt can issue IP Address Certificate !

To have your first IP CERTIFICATE go to staging
A good usage is Securing remote access IP like device, VPS host, RDP, ...
So good luck LETSENCRYPT !
Source LetsEncrypt.org

can i wildcard 0.0.0.0/0

xemaps

@Levi said:
On another hand malware C&C's will also celebrate.

There are certificates everywhere today. How would they do more damage with an SSL Letsencrypt certificate? I am curious to see your/the solution.

xemaps

@theraw said:
can i wildcard 0.0.0.0/0

I suggest to try to acquire the best for you 255.255.255.255/32

Levi

@xemaps said:

@Levi said:
On another hand malware C&C's will also celebrate.

There are certificates everywhere today. How would they do more damage with an SSL Letsencrypt certificate? I am curious to see your/the solution.

Now they need domain to be purchased and active. IP, especially ipv6 is unmetered resource for malice. But that’s just fud. Safely ignore. Doomer must doom.

kedihacker

@Levi said:

@xemaps said:

@Levi said:
On another hand malware C&C's will also celebrate.

There are certificates everywhere today. How would they do more damage with an SSL Letsencrypt certificate? I am curious to see your/the solution.

Now they need domain to be purchased and active. IP, especially ipv6 is unmetered resource for malice. But that’s just fud. Safely ignore. Doomer must doom.

They can just dispose of addresses after use like they don't use hacked servers for c2?

sillycat

@Levi said:
On another hand malware C&C's will also celebrate.

Why would they use https? Simply useless and makes their stuff more easily detectable (see: cert transparency).

Levi

@sillycat said:

@Levi said:
On another hand malware C&C's will also celebrate.

Why would they use https? Simply useless and makes their stuff more easily detectable (see: cert transparency).

Wait, so encryption in this case is bad?

kedihacker

@Levi said:

@sillycat said:

@Levi said:
On another hand malware C&C's will also celebrate.

Why would they use https? Simply useless and makes their stuff more easily detectable (see: cert transparency).

Wait, so encryption in this case is bad?

They can just pin a certificate which doesn't need to be publicly trusted.

TimboJones

@sillycat said:

@Levi said:
On another hand malware C&C's will also celebrate.

Why would they use https? Simply useless and makes their stuff more easily detectable (see: cert transparency).

So that it isn't easily picked off with a basic DPI firewall.