On Mon, Nov 23, 2015 at 12:52 PM, Martin Thomson <[email protected]>
wrote:

> The problem is that it the ACME server needs some sort of assurance
> that the client controls the server.  Showing control over the server
> on port 443 is probably the best signal possible.
>
> Showing control over a server on ports < 1024 might be OK.  Some
> operating systems require additional privileges to serve on those
> ports.  That said, it's not universal, though I'm not sure whether it
> matters for those cases where <1024 is available without access
> controls.
>



How does showing control over port 443 convey more information than showing
control over port 22, 80, 487, 1023?
_______________________________________________
Acme mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/acme

Reply via email to