4 ms·
Politically speaking, it's probably not the best idea to have one organization issuing all SSL certs used on the web.
by thekyle 7y ago
Politically speaking, it's probably not the best idea to have one organization issuing all SSL certs used on the web.
- ferzul 7y agobut that's solved, not by avoiding the automated, short term, machine aided certificate generation by Acme Bot and related tools, but by spreading them to other CAs. And every time someone says, can't everyone just use LetsEncrypt, they mean, why haven't they automated it?
- throw0101a 7y agoACME only became an RFC in March 2019: it's a Johnny Come Lately to the cert world. And it's not like it was the first/only game in town for cert issuing APIs: * https://en.wikipedia.org/wiki/Enrollment_over_Secure_Transport https://en.wikipedia.org/wiki/Enrollment_over_Secure_Transpo... * https://en.wikipedia.org/wiki/Simple_Certificate_Enrollment_Protocol https://en.wikipedia.org/wiki/Simple_Certificate_Enrollment_... ACME is the third kick at the can AFAICT. Some people could perhaps be excused for thinking ACME/LE was just another flash in the pan.