Wayback Machine shows as of 2021-01-25, Let's Encrypt still planned to implement RFC 8738 to issue certs against IP addresses as well as domains. This feature has now been removed from the Upcoming Features page. Is support for this feature still planned, or was it released somewhere and I didn't no…

It has been removed 16 days ago by @josh without any accompanying text unfortunately.

We recently explored what it would take to support IP address validation - cost to implement, risks, and value to subscribers. We decided that it doesn't make sense to prioritize the work over other important projects any time soon so we removed it from our roadmap. I know there are some people out…

May I suggest an improvement in communications for the future? Perhaps it would have been better to "shelve" the feature with this explanation on the upcoming features page or perhaps somewhere else. I think transparency is ALWAYS the better option in stead of just deleting things and have the Commu…

Hi Osiris, Noted and we will definitely look to do that in the future! All about that transparency and making sure our community knows what's happening at Let's Encrypt and ISRG. -JP

Thanks! While I recognise the amazing things ISRG/LE does as a company/CA and their staff, I also have a great feeling it's also a Community Effort©®™ :slight_smile: Not just here, but also at GitHub. Therefore, I think it's nice if the Community is kept in the loop with these kinds of things.

[image] jple: All about that transparency and making sure our community knows what's happening at Let's Encrypt and ISRG. IMHO, the problem with the messaging on this is less about "Transparency" and more about "Managing Expectations". The odd thing, in this scenario, is that you were trying…

..but ignoring everyone who did.

For more information, from my old draft pull requests (it can process cert for IP, but Ratelimit was busted and no way this was tested or log enough to be CA/B compliment ) Comment by [jsha] jsha to …

Thank you all for the quick replies and clarification. I look forward to seeing this implemented in the future. For anyone arriving here looking for an alternative, the ZeroSSL API (non-ACME) can provide certs for IP addresses. This is the only working solution I have currently found.

Planned RFC 8738 support pulled?

Feature Requests

Topic		Replies	Views
'IP Addresses in Certificates' still on roadmap? Feature Requests	3	1158	December 11, 2021
Plans to support RFC 8738 Feature Requests	23	3886	April 3, 2020
Certificates for IP addresses Feature Requests	7	5624	September 18, 2021
Will Let's encrypt allow cert for ip address? Issuance Policy	2	1072	March 16, 2019
LetsEncrypt IP Addresses... It's Actually pretty important Feature Requests	22	22449	August 29, 2020

Planned RFC 8738 support pulled?

Related topics