[benlivengood]

I wonder how well common acme tools implement exponential backoff on retries. With a ton of clients you can inadvertently make a DDoS longer/worse.

Let's Encrypt asks for max 1 request per day per certificate: https://letsencrypt.org/docs/integration-guide/

[francislavoie]

Caddy does a lot of it: https://caddyserver.com/docs/automatic-https#errors, and Caddy also falls back to ZeroSSL if it couldn't issue with Let's Encrypt. Caddy is without a doubt the most robust ACME client implementation to date.

[bobberkarl]

I completely dropped nginx for caddy some months ago. The only thing missing is an ingress implementation of caddy