Re: [Acme] kinds of proof

[Randy Bush <[e-mail]>]

[ statement of obvious ]

if the goal is merely to enable OE, then self signed will do.

[ personally, i trust a self-signed cert about as much as one descending
from one of the 300+ cas who paid to be installed in the browser. ]

"oh, but we want the browser (or mail client or ...) indicator to turn
green."  well then, we need to agree on what that green indicator means
(swamp 1), and then how to 'prove' that the certificate requestor meets
those criteria (swamp 2), and how that proof continues in time.

i am not seeing simple clear guidance through either swamp.

randy