Never underestimate the ability of “clever” people to overcomplicate things. Let’s Encrypt has all the information it needs from prior API calls during the provisioning process to issue the certificates (RFC 8555 § 7.4) and yet still asks you to package the exact same information in a CSR request encoded in an archaic format and thus complicate the process/clients unnecessary. They might as well ask you to include a photo of the request too for all the sense it makes.

*smh*

Show thread
Follow

@aral so, like people who try to design their own crypto algorithm s

@blacklight447 @aral

nothing wrong with that, just make sure you get a competent third party to audit your math model and code.
Sign in to participate in the conversation
Mastodon 🔐 privacytools.io

Fast, secure and up-to-date instance. PrivacyTools provides knowledge and tools to protect your privacy against global mass surveillance.

Website: privacytools.io
Matrix Chat: chat.privacytools.io
Support us on OpenCollective, many contributions are tax deductible!