Re: [Acme] acme in a firewalled environment

Presumably, your web server (or whatever server you're going to use this
cert for) is going to need to accept incoming connections.

On Tue, Dec 2, 2014 at 10:01 AM, Ben Schumacher <bschumac@cisco.com> wrote:

> On 12/2/14 10:52 AM, Eliot Lear wrote:
>
>> Question:
>>
>> Are the myriad of enterprise servers in scope for ACME?  In those
>> environments it's not unreasonable to assume that a firewall exists to
>> prevent incoming connections, and DNS control is not available.  In fact
>> split DNS might introduce all sorts of fun resolution issues even if
>> control is possible from the inside.
>>
>
> Eliot-
>
> I would say it is probably out of scope, with regard to public CAs, but
> there is nothing that would prevent an enterprise-wide CA that could be
> ACME enabled.
>
> For example, ACME could be integrated into the Certificate Management
> functionality of your enterprise directory services / host management
> infrastructure.
>
> Thanks,
> Ben
>
> _______________________________________________
> Acme mailing list
> Acme@ietf.org
> https://www.ietf.org/mailman/listinfo/acme
>