4 ms·
but that's solved, not by avoiding the automated, short term, machine aided certificate generation by Acme Bot and related tools, but by spreading them to other
by ferzul 7y ago
but that's solved, not by avoiding the automated, short term, machine aided certificate generation by Acme Bot and related tools, but by spreading them to other CAs.
And every time someone says, can't everyone just use LetsEncrypt, they mean, why haven't they automated it?
- throw0101a 7y agoACME only became an RFC in March 2019: it's a Johnny Come Lately to the cert world. And it's not like it was the first/only game in town for cert issuing APIs: * https://en.wikipedia.org/wiki/Enrollment_over_Secure_Transport https://en.wikipedia.org/wiki/Enrollment_over_Secure_Transpo... * https://en.wikipedia.org/wiki/Simple_Certificate_Enrollment_Protocol https://en.wikipedia.org/wiki/Simple_Certificate_Enrollment_... ACME is the third kick at the can AFAICT. Some people could perhaps be excused for thinking ACME/LE was just another flash in the pan.