Will caddy TLS challenge for any domain on :443

Help
1

:443, h3.xx.yy, zh.xx.yy {
…
}
the config is above

somebody say if i use ** :443 ** in the Caddyfile

If someone visits:

  • random.hacker.com
  • 123.abc.xx.yy
  • your.server.ip

As long as the request reaches your server on port 443, Caddy will attempt to issue a TLS certificate for those domains (unless a wildcard certificate already covers them, or you’ve manually disabled automatic TLS).

This can result in:

  • :no_entry: Abuse of your ACME (Let’s Encrypt) rate limits;
  • :no_entry: Caddy failing to start due to certificate issuance errors (e.g. the domain isn’t yours);
  • :no_entry: Performance impact from malicious or unwanted traffic;

is it true?

1 Like
2

No

2 Likes
3

:443 Doesn’t this setting just accept requests from all domains?

4

No, it doesn’t, unless explicitly configured to do so.

2 Likes
5

Just curious where you got this information

6

chatgpt

1 Like
7

Ah. No wonder everything about it is incorrect… not surprised.

Next time, try just giving our docs a read.