[Acme] Re: Proposal for Extension: Delegated HTTP-01 Validation in ACME Protocol

2025-01-23 Thread Jared Crawford
6755226. Estonian VAT > №: EE102625532. Glauca Digital and the Glauca logo are registered > trademarks in the UK, under № UK3718474 and № UK3718468, > respectively. > > > Ar Iau, 23 Ion 2025 am 00:59 Jared Crawford > ysgrifennodd: > >> This assumes anycasted DNS,

[Acme] Re: Proposal for Extension: Delegated HTTP-01 Validation in ACME Protocol

2025-01-22 Thread Jared Crawford
, Porkuni küla, Lossi tn 1, 46001, trading as Glauca > Digital, is a company registered in Estonia under № 16755226. Estonian VAT > №: EE102625532. Glauca Digital and the Glauca logo are registered > trademarks in the UK, under № UK3718474 and № UK3718468, > respectively. >

[Acme] Re: Proposal for Extension: Delegated HTTP-01 Validation in ACME Protocol

2025-01-22 Thread Jared Crawford
ay > necessitate further DNS lookups if it is 30X redirected. > > Aaron > > On Tue, Jan 21, 2025 at 12:21 PM Jared Crawford > wrote: > >> I think that if the original web server is not involved, then it's not >>> really >>> doing authorization. &

[Acme] Re: Proposal for Extension: Delegated HTTP-01 Validation in ACME Protocol

2025-01-21 Thread Jared Crawford
est out of N (even with a small N=3, this will shift p50 propagation delay to be the p80 of single perspective). On Mon, Jan 20, 2025 at 2:52 PM Michael Richardson wrote: > > Jared Crawford wrote: > > The 301 redirect works only for hostnames with publicly exposed > webservers. &

[Acme] Re: Proposal for Extension: Delegated HTTP-01 Validation in ACME Protocol

2025-01-17 Thread Jared Crawford
is a company registered in Estonia under № 16755226. Estonian VAT > №: EE102625532. Glauca Digital and the Glauca logo are registered > trademarks in the UK, under № UK3718474 and № UK3718468, > respectively. > > > Ar Gwen, 17 Ion 2025 am 19:55 Jared Crawford > ysgrifennodd:

[Acme] Re: Proposal for Extension: Delegated HTTP-01 Validation in ACME Protocol

2025-01-17 Thread Jared Crawford
> > I believe this would achieve all of the same benefits as you describe, > except for "Reduced Exposure". At which point, I think it is reasonable to > suggest that Applicants use the "dns-01" method if their goal is to get > certificates for hostnames whose webservers are not publicly exposed.

[Acme] Proposal for Extension: Delegated HTTP-01 Validation in ACME Protocol

2025-01-16 Thread Jared Crawford
Dear ACME Working Group, I hope this message finds you well. I am writing to propose an extension to the ACME protocol to enhance the http-01 challenge type by allowing delegation to direct validation requests to a designated server similar to what is possible for dns-01 challenges today via CNAME