The following feedback is based on 8010a31 (current HEAD of master). Section 7.4, Applying for Certificate Issuance, states "The server MUST issue the requested certificate and update the order resource with a URL for the certificate shortly after the client has fulfilled the server’s requirements."
Per RFC 2119 Section 6, the imperative MUST should be used with care and sparingly. The use of "shortly" in the above sentence is imprecise. It is not possible for a server author to know, with confidence, that they are adhering to this requirement. It is not possible fore a client author to make design or implementation decisions based on this requirement. I would propose either: a) Replacing "shortly" with a more precise expectation. b) Replacing "MUST" with "should". I believe there are advantages for setting expectations as to the turn-around time for certificate issuance and would therefore prefer option (a), assuming agreement could be reached on more precise language. Regards, Zach Shepherd
_______________________________________________ Acme mailing list [email protected] https://www.ietf.org/mailman/listinfo/acme
