Obviously, I've had a long day. "They" are my client.
From: [email protected] [mailto:[email protected]] On Behalf Of Micheal Espinola Jr Sent: Tuesday, November 11, 2014 2:34 PM To: ntsysadm Subject: Re: [NTSysADM] RE: making ADCS resilient Trying to follow along here without making incorrect assumptions - who's 'they' ?: On Tue, Nov 11, 2014 at 11:14 AM, Michael B. Smith <[email protected]<mailto:[email protected]>> wrote: Sorry. They issue certs from the root for LDAPS. There is no requirement for that, and I haven't investigated it in detail, but they believe it minimizes problems in bringing child domains online. -- Espi
