diff --git a/new/features.html b/new/features.html index 114ca17..65a0662 100644 --- a/new/features.html +++ b/new/features.html @@ -527,7 +527,7 @@

Must-Staple

- Caddy can obtain certificates that force OCSP stapling if the CA supports it. This grants a higher degree of security in the case of revocation. + Caddy can obtain certificates that force OCSP stapling if the CA supports it. This may grant a higher degree of security in the case of revocation.
@@ -545,24 +545,32 @@ You can customize the type of key used for your certificates.

Certificate lifetimes

Most ACME clients assume 90-day certificates, or don't expect certificates shorter than 7 days. Caddy can successfully manage certificates with lifetimes on the order of hours and minutes.

-

Instead of hard-coding a certain age before renewing, Caddy computes the age relative to the lifespan of each certificate, called a Renewal Window Ratio. By default, Caddy renews certificates after 2/3 of their usable lifetime. This ratio works for most validity periods, but can be adjusted.

Any lifetime
+
+

Intelligent error handling

+
+ If Caddy can't get a certificate, errors are logged and Caddy will backoff exponentially and retry as long as needed until it succeeds (typically up to 30 days but could be longer). Caddy makes every reasonable effort to keep your certificate renewed. +
+
+ Exponential backoff +
+

Built-in throttling

@@ -572,6 +580,102 @@

ACME

+ +

+ Caddy's ACME client is best-in-class, with higher reliability and more production experience than any other integrated ACME client available today. Caddy has been using ACME since before the public availability of Let's Encrypt, and Caddy works with any ACME-compatible CA. +

+ +
+
+

Compatibility

+
+ Some ACME clients are only tested with Let's Encrypt. Caddy is guaranteed compatible with all ACME-capable CAs. +
+
+ All RFC 8555-compliant certificate authorities, such as: +
    +
  • Let's Encrypt
    • +
  • ZeroSSL
    • +
  • Google Trust Services
    • +
  • BuyPass
    • +
  • DigiCert
    • +
  • GlobalSign
    • +
  • SSL.com
    • +
  • Smallstep
    • +
+
+
+
+

Test endpoints

+
+ By default, Caddy will fall back to a CA's test or staging endpoint (if there is one) after a failed attempt at getting a certificate to avoid hitting CA-enforced production rate limits. This could also be an ACME server you set up solely for the purpose of validating DNS configurations. +
+
+ Let's Encrypt (others configurable) +
+
+
+

External account binding

+
+ Optionally configure External Account Binding (EAB) to enable Caddy to work with CAs that require you to have a separate account with them. +
+
+
+

Challenge types

+
+ Caddy supports all major ACME challenge types for Web PKI and can also be extended to support others. +
+
    +
  • HTTP-01
    • +
  • TLS-ALPN-01
    • +
  • DNS-01
    • +
+
+
+

Alternate challenge ports

+
+ While certain ACME challenges must use the standardized ports 80 and 443, Caddy supports listening for these on alternate ports if you are forwarding them through a router. +
+
    +
  • HTTP (default 80)
    • +
  • TLS-ALPN (default 443)
    • +
+
+
+

DNS challenge integrations

+
+ Solve the DNS challenge with integrations for dozens of DNS providers. This list is incomplete; see the full list of DNS providers. +
+
    +
  • ACME-DNS
    • +
  • AliDNS
    • +
  • Cloudflare
    • +
  • DigitalOcean
    • +
  • DNSPod
    • +
  • DuckDNS
    • +
  • DynDNS
    • +
  • EasyDNS
    • +
  • Gandi
    • +
  • GoDaddy
    • +
  • Google Cloud DNS
    • +
  • Hetzner
    • +
  • Linode
    • +
  • Name.com
    • +
  • Namecheap
    • +
  • Namesilo
    • +
  • Netlify
    • +
  • OVH
    • +
  • Porkbun
    • +
  • PowerDNS
    • +
  • RFC 2136
    • +
  • Route 53
    • +
  • Scaleway
    • +
  • Vercel
    • +
  • Vultr
    • +
  • See all...
    • +
+
+
diff --git a/new/index.html b/new/index.html index b89ff13..88a5e0b 100644 --- a/new/index.html +++ b/new/index.html @@ -159,7 +159,7 @@

software assurance

- Some text here that explains sponsorships + Sponsorships aren't just donations. They provide your business with benefits

See sponsorships
@@ -345,54 +345,9 @@
-
-
- -
-
- Caddy is awesome. -
-
- Firstname lastname -
-
- 9000x developer, Bigcorp -
-
-
-
-
-
- -
-
- Caddy is awesome. -
-
- Firstname lastname -
-
- 9000x developer, Bigcorp -
-
-
-
-
-
- -
-
- Caddy is awesome. -
-
- Firstname lastname -
-
- 9000x developer, Bigcorp -
-
-
-
+
+
+
@@ -468,6 +423,24 @@ {{include "/includes/footer.html"}} + + +