‹ BackHN Continuity

Thread

Building a certificate authority for the whole Internet

73 points · 57 comments · ewpratten

  1. chaz6 · · focus · HN ↗
    The article contains conflicting statements:

    > anyone already pointed at any existing free CA can move to us by changing a directory URL, with no new tooling and nothing to re-architect.

    > We will only issue to clients that support ACME Renewal Information (ARI), standardized in RFC 9773.

    I do not think both can be true.

    1. crote · · focus · HN ↗
      That doesn't sound like much of a contradiction to me: anyone already using standard ACME tooling can change to their new CA with a trivial configuration change - provided their standard ACME tooling is well-maintained enough to include a 5-year-old protocol extension.
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.