3 ms·
deleted I misread the text. The account binding is a new feature that's opt-in.
by Arnavion 4y ago
deleted I misread the text. The account binding is a new feature that's opt-in.
- CGamesPlay 4y agoSounds like you didn't add "accounturi=https://some/lets-encrypt/account-id https://some/lets-encrypt/account-id", which is what your quoted excerpt is probably referring to.
- Arnavion 4y agoYes, I had a reading comprehension fail. I thought it was implying that the browser would be using the CAA record to validate the cert's issuing account, but it's the CA that uses it to validate new issuance requests.