Re: [Acme] DNS-ACCOUNT-01 Updates

2023-05-12 Thread Antonios Chariton
Thanks for the e-mail Corey! > On 12 May 2023, at 15:35, Corey Bonnell wrote: > > > ACME Clients need to calculate the correct label. Although we provide the > > algorithm, a bash script, and test vectors, anecdotal data from ISRG > > suggest that some clients still mess things up

Re: [Acme] DNS-ACCOUNT-01 Updates

2023-05-12 Thread Q Misell
I'm also in favour of calling it DNS-02. I highly doubt there will be many (if any) versions of challenges beyond version 1. It makes more sense to me to read DNS-02 and DNS challenge type 2, not a upgraded edition of version 1. -- Any statements contained in this

Re: [Acme] DNS-ACCOUNT-01 Updates

2023-05-12 Thread Aaron Gable
For what it's worth, I'm in favor of calling it DNS-02. Despite your totally correct descriptions of the disadvantages of this new method, I *do* still view it as a generally-improved version of DNS-01. It's obviously backwards-incompatible, hence the new major version number, but it is generally

Re: [Acme] DNS-ACCOUNT-01 Updates

2023-05-12 Thread Corey Bonnell
Hi Antonios, Thanks for raising this draft again, especially since automation of domain validation currently is an active topic at the CA/B Forum validation sub-committee. Comments inline. > There was a suggestion to rename this challenge to DNS-02. This is something > that we had rejected

Re: [Acme] DNS-ACCOUNT-01 Updates

2023-05-12 Thread Antonios Chariton
> On 12 May 2023, at 03:30, Melinda Shore wrote: > > On 5/11/23 3:52 PM, Antonios Chariton wrote: >> What do you think about the naming? Do you perceive “DNS-02” as an improved >> version, or as a second option? We are happy to rename this to DNS-02 and we >> have no plans of breaking any