Re:ACME v2 and Wildcard Certificate Support is Live
by schoen on Tuesday March 13, 2018 @05:24PM
(#16579961)
Let's Encrypt is developing this feature but it might be a little premature to call it "standard"—it's not specified in the Baseline Requirements and I'm not sure whether there's any CA that has announced it as a part of all certificate issuance.
[ Parent
| on HN ]
Re:ACME v2 and Wildcard Certificate Support is Live
by amaccuish on Wednesday March 14, 2018 @01:09AM
(#16582496)
Most CAs aren't automated :) I believe any that do ensure that DNS requests are tried from multiple different locations to prevent this happening. Though you're right, the standards haven't caught up yet.