CA ignores HSTS: they aren't browsers, likewise they ignore certificate staudes of https page walie validating too.

2024-01-12 오후 12:02에 Rob Sayre 이(가) 쓴 글:
Hi,

Is this one valid?

https://www.rfc-editor.org/errata/eid6843

> the challenge must be initiated over HTTP, not HTTPS.

What if the host is on a .dev domain? That should be in the HSTS preload list.

thanks,
Rob


_______________________________________________
Acme mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/acme

_______________________________________________
Acme mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/acme

Reply via email to