ietf-wg-acme/acme
View on GitHub ↗ ★ 937 Python archived
A protocol for automating certificate issuance
8 mentions on Hacker News by 7 people: 0 stories, 8 comments · first 2016-05-25 · latest 2019-01-30
20082026
-
…TLS-SNI-01 and TLS-SNI-02 appear to have been removed from the spec approximately a year ago: https://github.com/ietf-wg-acme/acme/commit/cfe118734bab3f6b...
comment by zjs · 2019-01-30 · in I exploited TLS-SNI-01 issuing Let's Encrypt SSL-certs for any domain (2018) -
https://github.com/ietf-wg-acme/acme/blob/master/draft-ietf-... DNS security As noted above, DNS forgery attacks against the ACME server can result in the server making incorrect decisions about domain control and thus mis-issuing…
comment by alwillis · 2018-03-14 · in ACME v2 and Wildcard Certificate Support is Live -
…behind the scenes that leads up to the TXT record being generated. You can read all about it at https://github.com/ietf-wg-acme/acme/blob/master/draft-ietf-...
comment by alwillis · 2018-03-14 · in ACME v2 and Wildcard Certificate Support is Live -
…vague on what the changes are to the standard. Found the repo were development is being managed: https://github.com/ietf-wg-acme/acme
comment by yRetsyM · 2017-06-14 · in ACME v2 API Endpoint Coming January 2018 -
It looks like that should be happening soonish if I read the Github issues correctly. https://github.com/ietf-wg-acme/acme/pull/124 is "Enable the server to specify requirements for issuance" which seems to include wildcard cert support,…
comment by Intermernet · 2016-08-18 · in Rate Limits -
…seems to be that you should be using dns-01 for validation behind a load balancer instead. [0] https://github.com/ietf-wg-acme/acme/pull/138 [1] https://mailarchive.ietf.org/arch/msg/acme/6RSxtvpkcQNPmKs9f...
comment by bburky · 2016-07-21 · in On the fly SSL registration and renewal inside Nginx with Let's Encrypt -
You don't even have to specify an email address at all; it's considered optional in ACME.[0] [0] https://github.com/ietf-wg-acme/acme/blob/master/draft-ietf-...
comment by pred_ · 2016-06-11 · in Email Address Disclosures, Preliminary Report -
…But hopefully as ACME[0] becomes popular there won't be a need for tools like this anymore. [0] https://github.com/ietf-wg-acme/acme/
comment by michaelmior · 2016-05-25 · in Show HN: TLS cert expiration dashboard