6-Day and IP Address Certificates Are Generally Available

Re:6-Day and IP Address Certificates Are Generally Available by ycombinatrix on Friday January 16, 2026 @12:00PM (#46648720)

Domains map one-to-one with registrars, but multiple AS can be using the same IP address.

[ Parent | on HN ]

Re:6-Day and IP Address Certificates Are Generally Available by hojofpodge on Friday January 16, 2026 @12:09PM (#46648825)

Then it would be a grave error to issue an IP cert without active insight into BGP. (Or it doesn't matter which chain you have.. But calling a website from a sampling of locations can't be a more correct answer.)

[ Parent | on HN ]

Re:6-Day and IP Address Certificates Are Generally Available by ycombinatrix on Friday January 16, 2026 @03:49PM (#46652013)

>it would be a grave error to issue an IP cert without active insight into BGP

Why? Even regular certs are handed out via IP address.

[ Parent | on HN ]

Re:6-Day and IP Address Certificates Are Generally Available by hojofpodge on Saturday January 17, 2026 @06:10AM (#46657094)

> why we are wasting so much time on utterly wrong TOFU authorization? If you are supposed to have an establishable identity I think there is DNSSEC back to the registrar

They retire challenges that were once acceptable. What happens if they require a real chain of trust? They retire http and domain names keep working on DNS/DNSSEC.

Making IP with only http challenges is going backwards.

[ Parent | on HN ]