Hacker News Reader

what practical situation do you encounter that DNS isn't an option?

why are you shutting down servers to rotate certificates? a reload should be totally possible!

I think it refers to stopping the main service so that certbot can bind port 80 during the verification process.

The person you're responding to is asking about verification through dns, which is an option that avoids the need for http verification.

certbot can host the verification files on most webservers people would already be running (like Apache and nginx) so this isn’t necessary.