News for hackers. Stuff that matters.

A comment on Issue with TLS-ALPN-01 Validation Method.

Re:Issue with TLS-ALPN-01 Validation Method by Aissen on Wednesday January 26, 2022 @04:49AM (#30083572)
Small feedback for the letsencrypt folk: I got the email saying that I have two ACME accounts ids affected. It would have been nice to know which domains are (even if it's just the first ~10 or so per account).
[ Parent | on HN ]
Re:Issue with TLS-ALPN-01 Validation Method by Kesseki on Wednesday January 26, 2022 @06:48PM (#30093871)
The full list of affected certificates and domains is now available: https://community.letsencrypt.org/t/170449/
[ Parent | on HN ]
Re:Issue with TLS-ALPN-01 Validation Method by hannob on Wednesday January 26, 2022 @04:52AM (#30083590)
They made the same mistake with the SNI deprecation and got plenty of feedback about it...

It's disappointing that they haven't learned from this.

[ Parent | on HN ]
Re:Issue with TLS-ALPN-01 Validation Method by sebiw on Wednesday January 26, 2022 @06:40AM (#30084324)
I understand your pain. Maybe keep in mind what operation they are running (complexity and scale) and that feedback may take time to implement. To put this into perspective think about what replacing certificates (or say obtaining new certificates) felt like before Let's Encrypt an ACME were a thing. ;-)
[ Parent | on HN ]