On 10/02/2016 08:49 AM, Richard Barnes wrote: > This change seems to suppose that there is One True Cert Chain
It does not suppose that. It supposes most CAs will offer One Recommended Cert Chain that is "best" for most of their customers. And in fact that is the best common practice today. Alternate chains can be offered with the Link rel=alternate that I mentioned on-list (but haven't yet incorporated into the PR). What do you think of that approach? _______________________________________________ Acme mailing list Acme@ietf.org https://www.ietf.org/mailman/listinfo/acme