we don’t need another mail app. they should’ve just supported FairEmail. it’s great and works flawlessly. developed by one guy who does not get enough in return. if you can, support him by buying the premium version and yourself by switching to the best android mail client. https://email.faircode.eu/

that’s genius. i have never even considered that you could use a (sub)domain with a local ip like that to get a certificate from a trusted ca. i ma not sure i understand the neccessity for api access to your dns service. is the txt record for LE different every time you have to pass a challenge? otherwise i imagine you could just set and forget the record.

thank you for the explanation, well appreciated!

could you expand a bit on your edit? so bitwarden extensions need a valid ssl certificate for the domain where the server is hosted? how do you get that for (i assume) a local domain? thank you for your time!