IETF Logo Mail Archive

Re: [Acme] Server on >= 1024 port

Eric Rescorla <ekr@rtfm.com> Thu, 03 December 2015 00:42 UTC

Return-Path: <ekr@rtfm.com>
X-Original-To: acme@ietfa.amsl.com
Delivered-To: acme@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 52FB81ACC92 for <acme@ietfa.amsl.com>; Wed, 2 Dec 2015 16:42:13 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.277
X-Spam-Level:
X-Spam-Status: No, score=-1.277 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L7NFgeuRVHeH for <acme@ietfa.amsl.com>; Wed, 2 Dec 2015 16:42:12 -0800 (PST)
Received: from mail-yk0-x22b.google.com (mail-yk0-x22b.google.com [IPv6:2607:f8b0:4002:c07::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 210B01AC3C4 for <acme@ietf.org>; Wed, 2 Dec 2015 16:42:12 -0800 (PST)
Received: by ykba77 with SMTP id a77so68075599ykb.2 for <acme@ietf.org>; Wed, 02 Dec 2015 16:42:11 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=saETLP3qiGoB6BGc0W7BwMc+RUP85hj75KTxhFfbqd8=; b=N5nAal3yR/X93FSppS/Vg34Pq7u6SZAS9HteELRf4OX1wPEIjPxZ5R4NryeTp3V784 YR9RWau+yBJj7VBmOr/NnXzjnE+DPhHoGCuL2kCj0R1kYeCfg2dRS7tlPXDMdYGCZsEW eAytl6nCBc7Or4N57Dp7S0KB5e9ObN3g8quLSxbAIJvY4GELiO5sDaa0SGgnUYizhasV j9H9aqda/1gc+7+UhxGBvDaR48qYtaRQOUy/cqTLijsWjlmHu8MbgTYotLO6QQsPHfXq tNErnIhQzX74naCKJrsBPuw2x1Vu/02h++ULdQVEultYuxya1Wce5YVbpDFCmvNCn2a0 2plw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type; bh=saETLP3qiGoB6BGc0W7BwMc+RUP85hj75KTxhFfbqd8=; b=ainYCsBzL2ePSrNKXJo0l6CqM0Kbf1xROmRuB9hxeDM45iEGIN1n0ULD/kJRujfVHr mv5RTaTtnYGJCa2qHKBRiwGoAZ2lmXXfun1NxtcrFrmhyCnQiKM5UI3bZMr0u6BnO1F5 TS/74hLWZNCFo/calOQke8FCW4Cs6HOENbtuJITarJl3j4xjQCowaxkds3mehmr6wdli q4dFjSx7OyTJPdNo8yOAfNbnZw745fiAgMeC09osxiYZZP2P9r+nmv7P/YLMorpYbbmB 841NMTlpCd8Kvoadhwb5jVzYboYTcgLuYpqrbF0gKdn6hEwI+Gxb6TkNyjudF16CuoVB 93RQ==
X-Gm-Message-State: ALoCoQlXqtfrrkv8VYihUUjXf+Xte5lOiJWwl23+ss/VRby+X+qFeN/GOEKJuzlc8gwPD9J0OPRm
X-Received: by 10.129.46.84 with SMTP id u81mr4405288ywu.129.1449103331336; Wed, 02 Dec 2015 16:42:11 -0800 (PST)
MIME-Version: 1.0
Received: by 10.13.249.197 with HTTP; Wed, 2 Dec 2015 16:41:31 -0800 (PST)
In-Reply-To: <m3mvtsid8r.fsf@carbon.jhcloos.org>
References: <565589E4.2030107@desy.de> <565EBF56.3070502@desy.de> <D836A378-DA88-4AAF-B1E4-F34A80319DC1@gmail.com> <e9092589f3204a449af8b6f900be1303@usma1ex-dag1mb1.msg.corp.akamai.com> <CAL02cgQPZrx5d1xO-xKEQrV+pZKLkhYW_XDSm=QM8THs__s5qQ@mail.gmail.com> <m3si3kih5s.fsf@carbon.jhcloos.org> <CAL02cgTSXqK7sR_Lrfu94PTkqPZf1+ZOkBHrSgWCP05OwehVbQ@mail.gmail.com> <m3mvtsid8r.fsf@carbon.jhcloos.org>
From: Eric Rescorla <ekr@rtfm.com>
Date: Wed, 02 Dec 2015 16:41:31 -0800
Message-ID: <CABcZeBOv-DWv6gDKtUhRR8GWKG3o+8bG3C1dKU24ktwbnhMNrg@mail.gmail.com>
To: James Cloos <cloos@jhcloos.com>
Content-Type: multipart/alternative; boundary="001a114093804ed6060525f3a9c4"
Archived-At: <http://mailarchive.ietf.org/arch/msg/acme/Kj8-FtIEofRRZHC5Rcl66I055aI>
Cc: Richard Barnes <rlb@ipv.sx>, Paul Millar <paul.millar@desy.de>, "acme@ietf.org" <acme@ietf.org>, Yoav Nir <ynir.ietf@gmail.com>, "Salz, Rich" <rsalz@akamai.com>
Subject: Re: [Acme] Server on >= 1024 port
X-BeenThere: acme@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Automated Certificate Management Environment <acme.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/acme>, <mailto:acme-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/acme/>
List-Post: <mailto:acme@ietf.org>
List-Help: <mailto:acme-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/acme>, <mailto:acme-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Dec 2015 00:42:13 -0000

On Wed, Dec 2, 2015 at 4:31 PM, James Cloos <cloos@jhcloos.com> wrote:

> >>>>> "RB" == Richard Barnes <rlb@ipv.sx> writes:
>
> JC>> What CAs do any kind of challenge over anything other than smtp?
>
> RB> Let's Encrypt and WoSign spring immediately to mind.  They both do
> RB> web-based validation.
>
> RB> SSLMate also supports HTTP-based validation, and their certs are
> RB> issued by real CAs.
>
> Let's Encrypt is still a future CA, not a current one.
>

In what way?

-Ekr


> [Uttered with the hope that no-one misreads it as in any way negative
> or criticizing.]
>
> But given the others....
>
> -JimC
> --
> James Cloos <cloos@jhcloos.com>         OpenPGP: 0x997A9F17ED7DAEA6
>
> _______________________________________________
> Acme mailing list
> Acme@ietf.org
> https://www.ietf.org/mailman/listinfo/acme
>

v2.23.0 | Report a Bug | By Email