What is the current status of the implementation of multi-viewpoint validation?

@lipflip010 Thanks for the question,

We are nearing a production enforcing deployment of multi perspective validation but haven't launched it yet. I'm hopeful we can do this in Q1 2020 but it's primarily blocked on SRE time.

How did you test this? My understanding is that the staging environment is enforcing multiple perspective validation. It should require 2 of the 3 remote perspectives to agree with the primary perspective.

Production is making the remote perspective validation requests but we are only aggregating the results for analysis and not blocking issuance if they disagree with the primary perspective.

All of the challenge types as well as the associated DNS lookups (A, AAAA, CAA, etc) are done by the individual perspectives.

4 Likes