Cheap Web Space, Domain Name:
Web Space With E-Mail, PHP/MySQL.

What is the /.well-known/acme-challenge directory and can I delete it?

Question: 

Searching …

 

Unfortunately nothing found on "".

Premium support for Bitpalace web hosting customers only!

 in the United States (Chicago, IL): 1 (815) 526-7037, Fax (in Germany) +49 30 32 70 18 91

service@bitpalace.com 

Skype: bitpalast

One moment please … your browser is loading the page.

 

 

Symptom

In my document root directory I can also see a folder “/.well-known” and from there “/acme-challenge”. I haven't set up these folders. Are they dangerous?

 

Cause

“Acme” stands for “Automatic Certificate Management Environment”. The folder /.well-known/acme-challenge is a standard folder that is used for issuing and renewing Let's Encrypt SSL certificates. It is a globally binding standard on all web servers. A token is placed there, which the certification authority can read over the Internet. With the help of the token, the certification authority can check whether the server is actually responsible for the domain to be certified.

 

Solution

/.well-known/acme-challenge is often used by hackers to hide malware in it because website owners rarely or never look into this folder. Bitpalace sees no particular danger in this, because hacked websites also contain malicious code in other and usually numerous places, so that these would have to be restored from a backup or recreated anyway. Whether or not malicious code is also present in /.well-known/acme-challenge then no longer matters. Whether or not the path exists does not affect whether a website can be hacked.

Nevertheless, for this and other reasons, /.well-known/acme-challenge has been a virtual path to an area outside of your webspace that hackers' scripts cannot reach in the Bitpalace webspace accounts since the beginning of 2021. Many Bitpalace web space users therefore do not see this path in their document root directory. However, it is possible that the path is still visible in older webspace accounts from earlier SSL installations. You can usually delete /.well-known/acme-challenge. If the path is required by software, the software will recreate the path itself. If the /.well-known/acme-challenge path is deleted, any SSL certificate that may have been set up remains in place.

 

Overview of frequently asked questions 

 

 

 


 

Additional Services

Starter Server: Affordable web server from  3.62 US$ () /month with PHP, database and many more 

Online Reservation System: Occupancy & vacancy schedule for any ressources (vehicles, sports facilities …) & guest houses, holiday apartments …  8.64 US$ () /month 

Software development: Development of database applications, programming and revision of computer programs & scripts  42.78 US$ () /hour 

 

FAQ – frequently asked questions 

 

Kiribati

Austria

Cameroon

Guinea

Pakistan

Colombia

Cuba

Antigua and Barbuda

Panama

Papua New Guinea

Jordan

Argentina

Costa Rica

Australia

Germany

Bahamas

Lesotho

Barbados

Belize

Paraguay

Tuvalu

Honduras

Peru

Madagascar

Bolivia

Botswana

Malawi

Chile

Philippines

India

Malta

Puerto Rico

Rwanda

Saint Kitts and Nevis

Samoa

Marshall Islands

Saint Vincent and the Grenadines

Zambia

Jamaica

Mauritius

Saint Lucia

Dominican Republic

Liberia

Switzerland

Mexico

Canada

Dominican Republic

Micronesia, Federated States of

Seychelles

Namibia

Ecuador

Sierra Leone

El Salvador

Fiji

Singapore

Gambia

Solomon Islands

Nauru

Spain

New Zealand

Sudan

Swaziland

Nicaragua

Nigeria

South Africa

Kenya

Ghana

Tanzania, United Republic of

Tonga

Guyana

Trinidad and Tobago

Uganda

Palau

Uruguay

Venezuela

Ireland

Grenada

Guatemala

United Kingdom

Zimbabwe

 

"Cheap Web Space": Affordable web space, cheap web server, low-cost webserver, low-price web servers: fast web server / small web server (cheap web space). Web server for private homepages / small website projects.

 in the United States (Chicago, IL): 1 (815) 526-7037 •  GmbH, Sensburger Allee 27, D-14055 Berlin (Germany)
Your purchase is tax-free, because you order from a non-EU country. © 2024  GmbH. All rights reserved. and the logo are registered trademarks of GmbH. For photo credits see imprint.

Imprint Privacy policy Sitemap