Let's Encrypt is about to launch an IP certificate, although its validity period is only seven days, it still cannot prevent IP former holders from MiTM attacks within 7 days. I suggest that when issuing for an IP certificate, check if the current IP has valid certificates in CT. If so, require tha…

[image] hebbet: Reuse is 7 hours Not days I think they are commenting about the life of the cert itself, not reuse of the authorization. That is, person A gets a cert for an IP address. For whatever reason that IP is now controlled by person B. Person A's cert would still be valid for that…

Check valid certificates when issuing for IP certificates

Issuance Policy

Nekit December 16, 2025, 11:33am 18

"this week"

4 Likes

Topic		Replies	Views
IP Address certs and anycast Issuance Tech	17	605	November 15, 2025
When will Let's Encrypt's IP certificates be officially launched? Feature Requests	104	5563	December 24, 2025
How to revoke a certificate without account key or email Help	9	6028	December 1, 2016
Questions regarding "Announcing Six Day and IP Address Certificate Options in 2025" Help	50	1739	March 12, 2025
[Let's Encrypt Blog] We Issued Our First Six Day Cert Praise	26	676	March 29, 2025

Check valid certificates when issuing for IP certificates

Related topics