←back to thread

Six day and IP address certificate options in 2025

(letsencrypt.org)
197 points SGran | 1 comments | 16 Jan 25 15:36 UTC | HN request time: 0.212s | source
Show context
throw0101c ◴[16 Jan 25 19:00 UTC] No.42729397[source]▶
Note that ACME profiles are new, to the extent that the draft spec is (a) personal (and not prefixed with draft-ietf…), and (b) currently versioned -00:

* https://datatracker.ietf.org/doc/draft-aaron-acme-profiles/

The ACME spec is:

* https://datatracker.ietf.org/doc/html/rfc8555

replies(1): >>42730098 #
1. mholt ◴[16 Jan 25 19:57 UTC] No.42730098[source]▶
Yeah... thankfully, it's "pretty simple" for clients to implement. Just add a JSON field to your payload and that's it. (There's a little bit of error checking logic and input validation, like making sure the value is valid, but overall it's not too complex, unlike ARI, which is much more work.)