On Jul 31, 2017, at 2:21 PM, Walter H. <walte...@mathemainzel.info> wrote: > Just a thought of mine, would it be possible to add a section, to make it > possible > to get official SSL certificates for these 'home.arpa.' domains (for free), > so there would not be the need of running a own PKI?
I don't see how that could work. I agree that it's a problem in need of a solution, but since home.arpa wouldn't be externally visible, you couldn't use the fact that you can publish in a name in it to do the ACME authentication. I was hoping to get IP-based certs, but it turns out that letsencrypt (probably wisely) doesn't offer them.
_______________________________________________ homenet mailing list homenet@ietf.org https://www.ietf.org/mailman/listinfo/homenet
