>I would rather sidestep the issue of what format to put the certificate >response in, by putting the certificates directly into the JSON ACME order >object. I have not seen any arguments against that premise (except for “size”) >and several arguments in favor of it.
The "so-called PEM format" is what is accepted by all tooling out there. And if not (JKS) there are well-known tools to adapt it. We already asked for consensus on this, but I will ask again. Do people agree with Sean? Please speak up before next Weds. We had a strong feeling at the WG meeting, and scouting the list, I see only a handful of people in favor. -- Senior Architect, Akamai Technologies Member, OpenSSL Dev Team IM: [email protected] Twitter: RichSalz _______________________________________________ Acme mailing list [email protected] https://www.ietf.org/mailman/listinfo/acme
