while testing against pebble and changing pebble's state quite a lot, noticed most client include certbot/lego/etc errors out when remembers a account on that domain but server doesn't know about it (because pebble doesn't know about it) and only way to recover from it is delete account dir from cli…

I think it is possible that Let’s Encrypt may drop accounts in the future, and handling that case would be good. Realistically many clients don’t handle that so it would have to be a long phase-in, and we’d presumably only drop accounts that look unused so most clients wouldn’t hit this. (eg: no ac…

Should clients expect ACME server may drop accounts?

Client dev

griffin February 27, 2023, 3:41pm 3

And I'm adding this to my todo list for CertSage...

5 Likes

Topic		Replies	Views
FYI, edge case regarding race conditions ACME Orders and Authorizations to test/defend against Client dev	10	115	January 18, 2025
Pebble v2.3.0 released Client dev	1	1169	January 17, 2020
Boulder(pebble)/certbot specific - matching a key to an acme directory offline Client dev	5	825	March 21, 2020
About ACME Accounts Help	12	790	January 12, 2023
Possible new feature: paused ACME accounts Issuance Tech	35	2738	May 8, 2021

Should clients expect ACME server may drop accounts?

Related topics