[Acme] Re: Potential issues with dns-persist-01

[Seo Suchan <[e-mail]>]

How hard for an ACME CA to remember every public keys an account was/is tied to?

On 2026년 4월 17일 오후 8시 39분 42초 GMT+09:00, Shiloh Heurich <shiloh=[e-mail]> 작성함:
>
>> On Apr 6, 2026, at 14:40, Aaron Gable <aaron=[e-mail]> wrote:
>>> On Sat, Apr 4, 2026 at 6:47 PM zandoodle <[e-mail]> wrote:
>>>     • An attacker sets up an ACME server and convinces the client to use it, the client is then provided the attacker's ACME account on the CA's domain and instructs the client to setup dns-persist-01 under the attacker's account.
>>>     • An attacker sets up an ACME server and convinces the client to use it, the client is then provided the attacker's ACME account for the attacker's domain and instructs the client to setup dns-persist-01 under the attacker's account. This requires that the certificate authority allows accounts to be created under the attacker's domain e.g. creating the account under the domain in the Host header field as done by Let's Encrypt.
>> 
>> A few notes here:
>> 
>> First, these two scenarios are essentially identical. In both of them, the attacker is merely providing an attacker-controlled account URI to the victim client, to get them to populate it in a DNS record. The only difference with the second scenario is that the victim client operator would see that their directory URL and account URL have the same domain name, and might be less likely to notice that something weird is going on.
>> 
>> Second, the second of these scenarios doesn't actually work, at least not against Let's Encrypt. Although we reflect the Host: header in API responses, we only respect the canonical AccountURI for the purpose of CAA and dns-persist-01 accounturi=. A client that populates a TXT record with `accounturi=malicious.ca/acme/acct/12335` would not be able to complete validation.
>> 
>> Finally, the fundamental threat model here was already considered and mitigated in RFC 8555. One can imagine a similarly-positioned malicious ACME proxy-esque server which intercepts an HTTP-01 challenge and replaces the `token` with one of its own. However, the attacker still can't get the victim client to successfully complete validation because the necessary value presented by the client to complete the challenge consists of two pieces of information: the token (provided by the server) and the Key Authorization (computed directly by the client). The victim client can't be fooled into computing a Key Authorization for the malicious proxy's key.
>> 
>> So the solution here is to do the same. The dns-persist record should contain a piece of information computed directly by the client, rather than merely provided by the (potentially malicious) server. So I agree with Sebastian's suggestion that the record format should support an `accountkey=` parameter.
>
>Your analogy to the http-01 token substitution is correct. In the standard challenge flow, the dns-persist record contains no client-computed cryptographic material, so the same class of attack applies. RFC 8555 §10.2 describes this pattern formally and explains why Key Authorization was designed to prevent it. The draft should address this.
>
>Pre-provisioning is a different story and the thread hasn't raised it. In that flow there's no challenge object. The client constructs the record from its own account URL (the §7.3 Location header) and the `issuer-domain-name` from directory metadata or the CP/CPS. No server-provided value to substitute. This is the primary deployment model for the enterprise and multi-tenant cases the draft targets.
>
>The harder problem is that persistence and key binding work against each other. Key Authorization works for http-01 and dns-01 because those values are ephemeral: provision, validate, remove, rotate the key freely. A persistent record containing Thumbprint(accountKey) means every key rotation (§7.3.5) invalidates every dns-persist record across every domain on the account. For subscribers with hundreds or thousands of domains, that defeats the purpose of a persistent method. The draft chose accounturi because it's stable across rotations.
>
>Persistence, cryptographic key binding, key rotation support: pick two. That's the core tension.
>
>I see three options, roughly by disruption level:
>
>(a) Strengthen client verification within the current design. Upgrade the §3.1 SHOULD to MUST when the client knows its own account URL. Add explicit security analysis of the missing dual-channel binding and the rationale. Qualify the "strong binding" language in §7.2.
>
>(b) Add an optional accountkey= parameter carrying base64url(Thumbprint(accountKey)), always self-computed by the client. When present, the CA verifies the thumbprint matches the current key. Restores dual-channel binding when used, but clients accept that rotation means updating DNS records. The forward-compatibility rule (MUST ignore unknown parameters) means existing implementations won't enforce it, so this only helps against CAs that opt in.
>
>(c) Sebastian's pubkey: scheme in accounturi. Max already noted the problem: a malicious server can tell the client its accounturi is pubkey:<attacker-thumbprint>. Always-self-compute as a mitigation requires the client to distinguish pubkey URIs it should compute from regular URIs it should provision as-is. That seems fragile.
>
>I'd go with (a) for -02, possibly (b) as a follow-on. But the real question for the WG is whether the pre-provisioning distinction is sufficient, or whether the standard challenge flow needs cryptographic binding even at the cost of rotation compatibility.
>
>Shiloh
>_______________________________________________
>Acme mailing list -- [e-mail]
>To unsubscribe send an email to [e-mail]