> terms-of-service-agreed (optional, boolean):

This should really be a URL, not a boolean.

> : Including this field in a new-account request,
> with a value of true, indicates the client's agreement with the terms of 
> service.
> This field is not updateable by the client.

Consider this flow:

1. user starts ACME client
2. ACME client retrieves metadata from acme server which includes url of ToS
3. ACME server is updated with new ToS
4. ACME client presents user w/ ToS from 2
5. user accepts ToS from 4
6. ACME client makes request to acme server with "true" based on 5/4/2
7. ACME server thinks the user has accepted ToS from 3.

_______________________________________________
Acme mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/acme

Reply via email to