TLS built-in out of the box

[Q-Droid 1007]

Is it time to explore this either in Emby core or as a plug-in if possible?

https://letsencrypt.org/2026/01/15/6day-and-ip-general-availability

Quote

Short-lived and IP address certificates are now generally available from Let’s Encrypt. These certificates are valid for 160 hours, just over six days. In order to get a short-lived certificate subscribers simply need to select the ‘shortlived’ certificate profile in their ACME client.

 

[Neminem 1618]

That sounds interesting, not that I need it.

But is sounds a lot like DDNS + Cert.

 

[Q-Droid 1007]

18 minutes ago, Neminem said:

That sounds interesting, not that I need it.

But is sounds a lot like DDNS + Cert.

 

These are IP based certificates which eliminate the need for domains.

I should rephrase: They eliminate the requirement of a domain name. Domain names still good but not needed.

 

 

Edited 4 hours ago by Q-Droid

[Neminem 1618]

That sound really nice .

Thanks for the explanation

[Apotropaic 55]

Interesting decision from Letsencrypt, I'm usually all-in when it comes to encrypting everything but surely this is just enabling bad actors from also enabling on the fly certs for whatever they're up to!?

I know they're not the first to do this, but they are free and support automation. I can see organisations just blanket blacklisting their certs to deal with this.

As for projects like emby it sounds pretty good, unless of course your IP is very dynamic