Re: [Acme] kinds of proof

On Fri, Nov 28, 2014 at 7:32 AM, Paul Hoffman <paul.hoffman@vpnc.org> wrote:

> On Nov 28, 2014, at 2:20 AM, Stephen Farrell <stephen.farrell@cs.tcd.ie>
> wrote:
> > Yep. Fully agree about DV. But DV isn't the only kind of
> > validation I'd like to be supported here.
> >
> > I'd like if it were possible to extend that to include cases
> > where one has control over the web server, but not the DNS.
>
> Those two paragraphs don't really go together. You absolutely can do DV in
> cases where you don't have control over the DNS; that's basically how all
> web certificate enrollment happens today.

To put a slightly finer point on it, web validation is extremely useful in
cases
where you only have loose control over the DNS.

-Ekr

> --Paul Hoffman
> _______________________________________________
> Acme mailing list
> Acme@ietf.org
> https://www.ietf.org/mailman/listinfo/acme
>