Re: [Acme] Server on >= 1024 port

James Cloos <cloos@jhcloos.com> Thu, 03 December 2015 00:39 UTC

Return-Path: <cloos@jhcloos.com>
X-Original-To: acme@ietfa.amsl.com
Delivered-To: acme@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C5C6D1A87E6 for <acme@ietfa.amsl.com>; Wed, 2 Dec 2015 16:39:49 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.011
X-Spam-Level:
X-Spam-Status: No, score=-2.011 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SIEoQSEMbmlI for <acme@ietfa.amsl.com>; Wed, 2 Dec 2015 16:39:47 -0800 (PST)
Received: from ore.jhcloos.com (ore.jhcloos.com [IPv6:2604:2880::b24d:a297]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D36B31A0061 for <acme@ietf.org>; Wed, 2 Dec 2015 16:39:47 -0800 (PST)
Received: by ore.jhcloos.com (Postfix, from userid 10) id 72BB31ED87; Thu, 3 Dec 2015 00:39:47 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jhcloos.com; s=ore14; t=1449103187; bh=WX76Fdp5nASekU2BJI4w6PcRzsd6K/L70Hzggh1huM0=; h=From:To:Cc:Subject:In-Reply-To:References:Date:From; b=pPi5owW7yW7ARHRz95n/jbSxJtfKz+dXbS2JVDxB2WJUBrC8EwbaXu1lZC9egSQwC n/vo7DRLWXQlOeKdmDRA4R4cTtXEwVWzhYOsOOXP/ed0uUf70lHvtThbSWXL0rjlyw yWVT5s1V7TLww/OwEgJEV9B9r8Phg/ECCSE97hsk=
Received: by carbon.jhcloos.org (Postfix, from userid 500) id AC3BF100CD541; Thu, 3 Dec 2015 00:31:48 +0000 (UTC)
From: James Cloos <cloos@jhcloos.com>
To: Richard Barnes <rlb@ipv.sx>
In-Reply-To: <CAL02cgTSXqK7sR_Lrfu94PTkqPZf1+ZOkBHrSgWCP05OwehVbQ@mail.gmail.com> (Richard Barnes's message of "Wed, 2 Dec 2015 18:12:36 -0500")
References: <565589E4.2030107@desy.de> <565EBF56.3070502@desy.de> <D836A378-DA88-4AAF-B1E4-F34A80319DC1@gmail.com> <e9092589f3204a449af8b6f900be1303@usma1ex-dag1mb1.msg.corp.akamai.com> <CAL02cgQPZrx5d1xO-xKEQrV+pZKLkhYW_XDSm=QM8THs__s5qQ@mail.gmail.com> <m3si3kih5s.fsf@carbon.jhcloos.org> <CAL02cgTSXqK7sR_Lrfu94PTkqPZf1+ZOkBHrSgWCP05OwehVbQ@mail.gmail.com>
User-Agent: Gnus/5.130014 (Ma Gnus v0.14) Emacs/25.0.50 (gnu/linux)
Face: iVBORw0KGgoAAAANSUhEUgAAABAAAAAQAgMAAABinRfyAAAACVBMVEX///8ZGXBQKKnCrDQ3 AAAAJElEQVQImWNgQAAXzwQg4SKASgAlXIEEiwsSIYBEcLaAtMEAADJnB+kKcKioAAAAAElFTkSu QmCC
Copyright: Copyright 2015 James Cloos
OpenPGP: 0x997A9F17ED7DAEA6; url=https://jhcloos.com/public_key/0x997A9F17ED7DAEA6.asc
OpenPGP-Fingerprint: E9E9 F828 61A4 6EA9 0F2B 63E7 997A 9F17 ED7D AEA6
Date: Wed, 02 Dec 2015 19:31:48 -0500
Message-ID: <m3mvtsid8r.fsf@carbon.jhcloos.org>
Lines: 20
MIME-Version: 1.0
Content-Type: text/plain
X-Hashcash: 1:28:151203:rlb@ipv.sx::uvXdOUZDtqlShInc:000000WBVxi
X-Hashcash: 1:28:151203:paul.millar@desy.de::64xxV7+UuIl9jaE4:000000000000000000000000000000000000000003kCKx
X-Hashcash: 1:28:151203:rsalz@akamai.com::lAue1xv9y1LGohRX:CX6PB
X-Hashcash: 1:28:151203:"acme\@ietf.org"::jDo+NgVde4QSvLii:FTDCk
X-Hashcash: 1:28:151203:acme@ietf.org::CL7eZn576Cw92HXq:000YwW34
X-Hashcash: 1:28:151203:ynir.ietf@gmail.com::qtsXm6s3zHlOgxgZ:000000000000000000000000000000000000000004h9ny
Archived-At: <http://mailarchive.ietf.org/arch/msg/acme/1A1XV43uES_mu5JBTSgWvdl0rwg>
Cc: Paul Millar <paul.millar@desy.de>, "Salz, Rich" <rsalz@akamai.com>, "acme@ietf.org" <acme@ietf.org>, Yoav Nir <ynir.ietf@gmail.com>
Subject: Re: [Acme] Server on >= 1024 port
X-BeenThere: acme@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Automated Certificate Management Environment <acme.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/acme>, <mailto:acme-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/acme/>
List-Post: <mailto:acme@ietf.org>
List-Help: <mailto:acme-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/acme>, <mailto:acme-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Dec 2015 00:39:49 -0000

>>>>> "RB" == Richard Barnes <rlb@ipv.sx> writes:

JC>> What CAs do any kind of challenge over anything other than smtp?

RB> Let's Encrypt and WoSign spring immediately to mind.  They both do
RB> web-based validation.

RB> SSLMate also supports HTTP-based validation, and their certs are
RB> issued by real CAs.

Let's Encrypt is still a future CA, not a current one.

[Uttered with the hope that no-one misreads it as in any way negative
or criticizing.]

But given the others....

-JimC
-- 
James Cloos <cloos@jhcloos.com>         OpenPGP: 0x997A9F17ED7DAEA6