It's also a shame they designed their own protocol instead of just using ACME[1], which is a standards-track IETF draft which has received significant security

It's also a shame they designed their own protocol instead of just using ACME[1], which is a standards-track IETF draft which has received significant security scrutiny. By ignoring ACME, they even managed to replicate my duplicate signature key selection vulnerability that was fixed in ACME nearly a year ago! [1] https://datatracker.ietf.org/wg/acme/charter/ https://datatracker.ietf.org/wg/acme/charter/