[Acme] Re: Proposal for Extension: Delegated HTTP-01 Validation in ACME Protocol

2025-01-17 Thread Q Misell
I still fail to understand why a 301 redirect to somewhere else doesn't satisfy this? -- Any statements contained in this email are personal to the author and are not necessarily the statements of the company unless specifically stated. AS207960 Cyfyngedig, having a reg

[Acme] Re: Proposal for Extension: Delegated HTTP-01 Validation in ACME Protocol

2025-01-17 Thread Jared Crawford
The 301 redirect works only for hostnames with publicly exposed webservers. All other hosts have to deal with the downsides of dns-01 challenges compared to the http-01 flow. On Fri, Jan 17, 2025 at 2:49 PM Q Misell wrote: > I still fail to understand why a 301 redirect to somewhere else doesn'

[Acme] Re: Proposal for Extension: Delegated HTTP-01 Validation in ACME Protocol

2025-01-17 Thread Jared Crawford
> > I believe this would achieve all of the same benefits as you describe, > except for "Reduced Exposure". At which point, I think it is reasonable to > suggest that Applicants use the "dns-01" method if their goal is to get > certificates for hostnames whose webservers are not publicly exposed.