One of the big problems with HTTPS is that it's inherently tied to either the public domain name system, or to manual configuration. This becomes a problem for the internet in general, because things like local network IoT automation controllers for consumers can really only work via some kind of c…

cafemessageboard.KFmKmryaRbSL1SYhPCD7Jw.192.168.5.6 DNS explicit forbid all numberic TLD, that's not a valid address. Browsers won't go anywhere. you will need to make a gtld for safe lan use first. while that kind of addressing works it has additional problem for free certificate context. it'…

Welcome to the Let's Encrypt Community, Daniel :slightly_smiling_face: Firstly, let me thank you for contributing to the discussion here. Whether we agree, disagree, or somewhere in between, open discourse is valuable. You present an interesting argument. I might have a roundabout addition to it.…

[image] orangepizza: Because you can create as many private key as you want, those addresses will overload LE infra quickly. same problem as onion addresses You are right, the essence of OP's post sounds a lot like Tor or i2p addressing, but weaker (unauthenticated label and IP). Let's Encryp…

A topic on DANE and the upcoming roots: [image] DANE and upcoming LE issuer certs Issuance Tech T…

Thank you for the warm welcome! It seems there are some real concerns about LEs capacity to keep up with this stuff over time. Perhaps a proof-of-work scheme could be used for rate limiting? As certificates only rarely need to be renewed, even something that takes multiple minutes is perfectly fin…

@jsha If you're still around, this topic may be of interest to you. :slightly_smiling_face:

I think @_az had a very good take on this - this scheme exists in Tor, in the form of onion addresses, but it's not a great fit for the public Internet. Also, if a scheme were truly self-authenticating, no certificate authority would be needed at all - just browser support. I agree with you @Eterni…

[image] jsha: You might be interested to read about Zooko's Triangle , which says that network names can be at most two of [human-meaningful, decentralized, secure]. I never knew about this! :astonished: It reminds me of the CIA triad of [confidentiality, integrity, availability]. We call th…

Certificates for subdomains of LAN IP addresses using embedded asymmetric keys?

Feature Requests

griffin November 6, 2020, 10:01pm 5

A topic on DANE and the upcoming roots:

Topic		Replies	Views
RFC: A way to use valid https with local hosts Issuance Policy	13	2580	July 19, 2018
Sign certificate for LAN usage (.lan domain) Feature Requests	20	21394	September 20, 2020
Completely LOCAL! Help	32	8731	January 3, 2023
Certificate for public IP without domain name Issuance Tech	85	248583	September 20, 2018
A public cert for localdev.letsencryrpt.org Server	23	5879	May 20, 2016

Certificates for subdomains of LAN IP addresses using embedded asymmetric keys?

Related topics