From 1ac7848ce65eeae4328cbaa92ca85b903cda1311 Mon Sep 17 00:00:00 2001 From: Zach Shepherd Date: Wed, 7 Jun 2017 17:02:03 -0700 Subject: [PATCH] Respond to review feedback * Clarify that the challenge involves TXT records * Clarify potential consequences of credential exposure --- .../certbot_dns_cloudflare/__init__.py | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/certbot-dns-cloudflare/certbot_dns_cloudflare/__init__.py b/certbot-dns-cloudflare/certbot_dns_cloudflare/__init__.py index dda05185f..b6a97c762 100644 --- a/certbot-dns-cloudflare/certbot_dns_cloudflare/__init__.py +++ b/certbot-dns-cloudflare/certbot_dns_cloudflare/__init__.py @@ -1,7 +1,7 @@ """ The `~certbot_dns_cloudflare.dns_cloudflare` plugin automates the process of -completing a ``dns-01`` challenge (`~acme.challenges.DNS01`) using the -Cloudflare API. +completing a ``dns-01`` challenge (`~acme.challenges.DNS01`) by creating, and +subsequently removing, TXT records using the Cloudflare API. Named Arguments @@ -38,9 +38,10 @@ to this file for use during renewal, but does not store the file's contents. .. caution:: You should protect these API credentials as you would the password to your Cloudflare account. Users who can read this file can use these credentials - to issue API calls on your behalf. Users who can cause Certbot to run using - these credentials can complete a ``dns-01`` challenge to acquire new - certificates or revoke existing certificates for associated domains. + to issue arbitrary API calls on your behalf. Users who can cause Certbot to + run using these credentials can complete a ``dns-01`` challenge to acquire + new certificates or revoke existing certificates for associated domains, + even if those domains aren't being managed by this server. Examples --------