On Mon, Dec 4, 2023 at 10:15 AM Harald Dunkel <harald.dun...@aixigo.com> wrote: > Upstream provides certbot 2.7.4. Would it be possible to keep > certbot in Sid roughly up-to-date?
Hi Harri, Right now, I've been hesitant to update certbot because of the lack of cryptographic signature verification. I've been working with upstream to try and close that gap, but we haven't gotten there yet. Take a peek at https://github.com/certbot/certbot/issues/9740 for reference. Even if we don't come up with a solution long-term, I may see if I can get one of the Let's Encrypt devs to do something as a one-off out of band, since we are a bit out of date at this point. It's definitely on my radar! Hopefully we'll cross this off the list soon. Sincerely, -- Harlan Lieberman-Berg ~hlieberman
