2018.01.11 Update Regarding ACME TLS-SNI and Shared Hosting Infrastructure

[Update 2018-01-18: The most up-to-date summary is at IMPORTANT: What you need to know about TLS-SNI validation issues] Please see this post for background information. The last 48 hours have been a busy time for Let’s Encrypt staff. We’ve been working hard to come up with a plan for ACME TLS-SNI validation that sufficiently protects the integrity of Web PKI while minimizing problems for people an

[Hash]

"ACME = Automated Certificate Management Environment" で Let's Encrypt が独自に開発, やってることはわりとシンプル (e.g. https://github.com/diafygi/acme-tiny/blob/master/acme_tiny.py). それに関する問題のアップデート

[jovi0608]

Let's EncryptのACME脆弱性の対応方針：TLS-SNI-01の利用は廃止の方向に。新規アカウントはSNI-01の利用禁止。既存アカウントはrenewalに限定。今後HTTP-01、DNS-01 のvalidationに移行を進めていくとのこと。