Signed HTTP Exchanges require SSL certificates with the CanSignHttpExchanges extension. DigiCert is currently the only provider of these certificates. It would be wonderful if support for this extension could be incorporated into Let’s Encrypt certificate generation. References: Signed HTTP Exchan…

Hi @mdmower , Welcome to the Let's Encrypt community forum :wave: I haven't been following any of this Signed HTTP Exchanges work. Thanks for opening a thread and sharing some context. I think it's likely too early in this draft's development for Let's Encrypt to prioritize implementation. It look…

A certificate with the CanSignHttpExchanges extension is required to serve AMP using Signed Exchanges: https://amp.dev/documentation/guides-and-tutorials/optimize-and-measure/signed-exchange “As of April 2019, only DigiCert provides this extension.”

Is this something to implement (instead of something like S/MIME!) whilst browser vendors officially consider the spec harmful? mozilla/standards-positions#29 mozilla/standards-positions#53 (comment) https://lists.w3.org/Archives/Public/ietf-http-wg/2018JanMar/0071.html mozilla/standards-positions…

Thanks for providing some context. Many of the comments you’ve shared are outdated though (by over a year). Notably, in the first thread you linked, there is ongoing effort to assuage the standards-positions concerns; see https://github.com/mozilla/standards-positions/issues/29#issuecomment-45954791…

CanSignHttpExchanges extension

Feature Requests

lol768 May 1, 2019, 5:54pm 4

Is this something to implement (instead of something like S/MIME!) whilst browser vendors officially consider the spec harmful?

mozilla/standards-positions#29
mozilla/standards-positions#53 (comment)
https://lists.w3.org/Archives/Public/ietf-http-wg/2018JanMar/0071.html
mozilla/standards-positions#29 (comment)
https://twitter.com/othermaciej/status/951001352347402240

Topic		Replies	Views
CanSignHttpExchanges Feature Requests	1	1080	September 22, 2020
For certificate, how to enable support for "CanSignHttpExchanges" extension from Google CA? Help	4	868	October 4, 2022
CanSignHTTPExchanges Feature Requests	2	1352	June 15, 2021
Certificate extensions Help	12	3964	September 1, 2016
X509 cert for signing files (digital signatures) Feature Requests	3	20430	July 27, 2018

CanSignHttpExchanges extension

Related topics