issues.json

[
  {
    "url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/21",
    "labels_url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/21/labels{/name}",
    "comments_url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/21/comments",
    "events_url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/21/events",
    "html_url": "https://github.com/ietf-wg-acme/acme/pull/21",
    "id": 112462048,
    "number": 21,
    "title": "Updating makefile and template",
    "user": {
      "login": "martinthomson",
      "id": 67641,
      "avatar_url": "https://avatars.githubusercontent.com/u/67641?v=3",
      "gravatar_id": "",
      "url": "https://api.github.com/users/martinthomson",
      "html_url": "https://github.com/martinthomson",
      "followers_url": "https://api.github.com/users/martinthomson/followers",
      "following_url": "https://api.github.com/users/martinthomson/following{/other_user}",
      "gists_url": "https://api.github.com/users/martinthomson/gists{/gist_id}",
      "starred_url": "https://api.github.com/users/martinthomson/starred{/owner}{/repo}",
      "subscriptions_url": "https://api.github.com/users/martinthomson/subscriptions",
      "organizations_url": "https://api.github.com/users/martinthomson/orgs",
      "repos_url": "https://api.github.com/users/martinthomson/repos",
      "events_url": "https://api.github.com/users/martinthomson/events{/privacy}",
      "received_events_url": "https://api.github.com/users/martinthomson/received_events",
      "type": "User",
      "site_admin": false
    },
    "labels": [

    ],
    "state": "open",
    "locked": false,
    "assignee": null,
    "milestone": null,
    "comments": 1,
    "created_at": "2015-10-20T21:13:04Z",
    "updated_at": "2015-10-20T21:14:55Z",
    "closed_at": null,
    "pull_request": {
      "url": "https://api.github.com/repos/ietf-wg-acme/acme/pulls/21",
      "html_url": "https://github.com/ietf-wg-acme/acme/pull/21",
      "diff_url": "https://github.com/ietf-wg-acme/acme/pull/21.diff",
      "patch_url": "https://github.com/ietf-wg-acme/acme/pull/21.patch"
    },
    "body": "This avoids the problem that @richsalz had with submodules.  Also, I've updated the template a little."
  },
  {
    "url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/18",
    "labels_url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/18/labels{/name}",
    "comments_url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/18/comments",
    "events_url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/18/events",
    "html_url": "https://github.com/ietf-wg-acme/acme/pull/18",
    "id": 111728485,
    "number": 18,
    "title": "Clarify encoding for certs in PoP challenge",
    "user": {
      "login": "jsha",
      "id": 220205,
      "avatar_url": "https://avatars.githubusercontent.com/u/220205?v=3",
      "gravatar_id": "",
      "url": "https://api.github.com/users/jsha",
      "html_url": "https://github.com/jsha",
      "followers_url": "https://api.github.com/users/jsha/followers",
      "following_url": "https://api.github.com/users/jsha/following{/other_user}",
      "gists_url": "https://api.github.com/users/jsha/gists{/gist_id}",
      "starred_url": "https://api.github.com/users/jsha/starred{/owner}{/repo}",
      "subscriptions_url": "https://api.github.com/users/jsha/subscriptions",
      "organizations_url": "https://api.github.com/users/jsha/orgs",
      "repos_url": "https://api.github.com/users/jsha/repos",
      "events_url": "https://api.github.com/users/jsha/events{/privacy}",
      "received_events_url": "https://api.github.com/users/jsha/received_events",
      "type": "User",
      "site_admin": false
    },
    "labels": [

    ],
    "state": "open",
    "locked": false,
    "assignee": null,
    "milestone": null,
    "comments": 0,
    "created_at": "2015-10-15T23:34:00Z",
    "updated_at": "2015-10-15T23:34:00Z",
    "closed_at": null,
    "pull_request": {
      "url": "https://api.github.com/repos/ietf-wg-acme/acme/pulls/18",
      "html_url": "https://github.com/ietf-wg-acme/acme/pull/18",
      "diff_url": "https://github.com/ietf-wg-acme/acme/pull/18.diff",
      "patch_url": "https://github.com/ietf-wg-acme/acme/pull/18.patch"
    },
    "body": "They should be base64url rather than base64, for symmetry with rest of spec."
  },
  {
    "url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/17",
    "labels_url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/17/labels{/name}",
    "comments_url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/17/comments",
    "events_url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/17/events",
    "html_url": "https://github.com/ietf-wg-acme/acme/pull/17",
    "id": 111311783,
    "number": 17,
    "title": "Add rateLimited error",
    "user": {
      "login": "jsha",
      "id": 220205,
      "avatar_url": "https://avatars.githubusercontent.com/u/220205?v=3",
      "gravatar_id": "",
      "url": "https://api.github.com/users/jsha",
      "html_url": "https://github.com/jsha",
      "followers_url": "https://api.github.com/users/jsha/followers",
      "following_url": "https://api.github.com/users/jsha/following{/other_user}",
      "gists_url": "https://api.github.com/users/jsha/gists{/gist_id}",
      "starred_url": "https://api.github.com/users/jsha/starred{/owner}{/repo}",
      "subscriptions_url": "https://api.github.com/users/jsha/subscriptions",
      "organizations_url": "https://api.github.com/users/jsha/orgs",
      "repos_url": "https://api.github.com/users/jsha/repos",
      "events_url": "https://api.github.com/users/jsha/events{/privacy}",
      "received_events_url": "https://api.github.com/users/jsha/received_events",
      "type": "User",
      "site_admin": false
    },
    "labels": [

    ],
    "state": "open",
    "locked": false,
    "assignee": null,
    "milestone": null,
    "comments": 0,
    "created_at": "2015-10-14T03:04:25Z",
    "updated_at": "2015-10-14T06:27:09Z",
    "closed_at": null,
    "pull_request": {
      "url": "https://api.github.com/repos/ietf-wg-acme/acme/pulls/17",
      "html_url": "https://github.com/ietf-wg-acme/acme/pull/17",
      "diff_url": "https://github.com/ietf-wg-acme/acme/pull/17.diff",
      "patch_url": "https://github.com/ietf-wg-acme/acme/pull/17.patch"
    },
    "body": "And clarify that error list is not exhaustive."
  },
  {
    "url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/16",
    "labels_url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/16/labels{/name}",
    "comments_url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/16/comments",
    "events_url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/16/events",
    "html_url": "https://github.com/ietf-wg-acme/acme/issues/16",
    "id": 111166731,
    "number": 16,
    "title": "http-01 protocol",
    "user": {
      "login": "billmasek",
      "id": 293568,
      "avatar_url": "https://avatars.githubusercontent.com/u/293568?v=3",
      "gravatar_id": "",
      "url": "https://api.github.com/users/billmasek",
      "html_url": "https://github.com/billmasek",
      "followers_url": "https://api.github.com/users/billmasek/followers",
      "following_url": "https://api.github.com/users/billmasek/following{/other_user}",
      "gists_url": "https://api.github.com/users/billmasek/gists{/gist_id}",
      "starred_url": "https://api.github.com/users/billmasek/starred{/owner}{/repo}",
      "subscriptions_url": "https://api.github.com/users/billmasek/subscriptions",
      "organizations_url": "https://api.github.com/users/billmasek/orgs",
      "repos_url": "https://api.github.com/users/billmasek/repos",
      "events_url": "https://api.github.com/users/billmasek/events{/privacy}",
      "received_events_url": "https://api.github.com/users/billmasek/received_events",
      "type": "User",
      "site_admin": false
    },
    "labels": [

    ],
    "state": "open",
    "locked": false,
    "assignee": null,
    "milestone": null,
    "comments": 0,
    "created_at": "2015-10-13T12:10:12Z",
    "updated_at": "2015-10-13T12:10:12Z",
    "closed_at": null,
    "body": "1.  All of the Base64 strings are actually Base64 URL encoded\r\n2.  In the Java support for big ints the top byte is set to 0 to eliminate issues with signs.  The thumbprint used here does not support that.  It would be useful to mention that in the spec.\r\n3.  I think it would help if there was an appendix with a complete example from key to key authorization to help clarify the points above."
  },
  {
    "url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/15",
    "labels_url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/15/labels{/name}",
    "comments_url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/15/comments",
    "events_url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/15/events",
    "html_url": "https://github.com/ietf-wg-acme/acme/issues/15",
    "id": 110985104,
    "number": 15,
    "title": "Request certificate lifetime",
    "user": {
      "login": "bifurcation",
      "id": 75597,
      "avatar_url": "https://avatars.githubusercontent.com/u/75597?v=3",
      "gravatar_id": "",
      "url": "https://api.github.com/users/bifurcation",
      "html_url": "https://github.com/bifurcation",
      "followers_url": "https://api.github.com/users/bifurcation/followers",
      "following_url": "https://api.github.com/users/bifurcation/following{/other_user}",
      "gists_url": "https://api.github.com/users/bifurcation/gists{/gist_id}",
      "starred_url": "https://api.github.com/users/bifurcation/starred{/owner}{/repo}",
      "subscriptions_url": "https://api.github.com/users/bifurcation/subscriptions",
      "organizations_url": "https://api.github.com/users/bifurcation/orgs",
      "repos_url": "https://api.github.com/users/bifurcation/repos",
      "events_url": "https://api.github.com/users/bifurcation/events{/privacy}",
      "received_events_url": "https://api.github.com/users/bifurcation/received_events",
      "type": "User",
      "site_admin": false
    },
    "labels": [

    ],
    "state": "open",
    "locked": false,
    "assignee": null,
    "milestone": null,
    "comments": 0,
    "created_at": "2015-10-12T14:28:28Z",
    "updated_at": "2015-10-12T14:28:28Z",
    "closed_at": null,
    "body": "The new-certificate transaction should allow the client to request a specific lifetime for a certificate.  There is no mechanism in PKCS#10 for this, so it will probably have to be JSON in the message body."
  },
  {
    "url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/14",
    "labels_url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/14/labels{/name}",
    "comments_url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/14/comments",
    "events_url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/14/events",
    "html_url": "https://github.com/ietf-wg-acme/acme/issues/14",
    "id": 110043155,
    "number": 14,
    "title": "Support key rollover for account keys",
    "user": {
      "login": "billmasek",
      "id": 293568,
      "avatar_url": "https://avatars.githubusercontent.com/u/293568?v=3",
      "gravatar_id": "",
      "url": "https://api.github.com/users/billmasek",
      "html_url": "https://github.com/billmasek",
      "followers_url": "https://api.github.com/users/billmasek/followers",
      "following_url": "https://api.github.com/users/billmasek/following{/other_user}",
      "gists_url": "https://api.github.com/users/billmasek/gists{/gist_id}",
      "starred_url": "https://api.github.com/users/billmasek/starred{/owner}{/repo}",
      "subscriptions_url": "https://api.github.com/users/billmasek/subscriptions",
      "organizations_url": "https://api.github.com/users/billmasek/orgs",
      "repos_url": "https://api.github.com/users/billmasek/repos",
      "events_url": "https://api.github.com/users/billmasek/events{/privacy}",
      "received_events_url": "https://api.github.com/users/billmasek/received_events",
      "type": "User",
      "site_admin": false
    },
    "labels": [

    ],
    "state": "open",
    "locked": false,
    "assignee": null,
    "milestone": null,
    "comments": 0,
    "created_at": "2015-10-06T16:04:40Z",
    "updated_at": "2015-10-06T16:04:40Z",
    "closed_at": null,
    "body": "Account keys should change over time to improve security.  We should have a way to change the key associated with an account with changing anything else about the account.\r\n\r\nSomething liike:\r\n\r\nPost: /rotate-key\r\n{\r\n\"key\":  { /* JWK key */ }\r\n}\r\n\r\nNote: The request should be signed with the old key.  All authorizations should remain with the account.  If there are any requests being validated then they should still use the old key (as specified by the oriignal authorization request."
  },
  {
    "url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/9",
    "labels_url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/9/labels{/name}",
    "comments_url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/9/comments",
    "events_url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/9/events",
    "html_url": "https://github.com/ietf-wg-acme/acme/issues/9",
    "id": 108571482,
    "number": 9,
    "title": "Use an extension for SimpleHTTP paths",
    "user": {
      "login": "jsha",
      "id": 220205,
      "avatar_url": "https://avatars.githubusercontent.com/u/220205?v=3",
      "gravatar_id": "",
      "url": "https://api.github.com/users/jsha",
      "html_url": "https://github.com/jsha",
      "followers_url": "https://api.github.com/users/jsha/followers",
      "following_url": "https://api.github.com/users/jsha/following{/other_user}",
      "gists_url": "https://api.github.com/users/jsha/gists{/gist_id}",
      "starred_url": "https://api.github.com/users/jsha/starred{/owner}{/repo}",
      "subscriptions_url": "https://api.github.com/users/jsha/subscriptions",
      "organizations_url": "https://api.github.com/users/jsha/orgs",
      "repos_url": "https://api.github.com/users/jsha/repos",
      "events_url": "https://api.github.com/users/jsha/events{/privacy}",
      "received_events_url": "https://api.github.com/users/jsha/received_events",
      "type": "User",
      "site_admin": false
    },
    "labels": [

    ],
    "state": "open",
    "locked": false,
    "assignee": null,
    "milestone": null,
    "comments": 4,
    "created_at": "2015-09-28T00:54:09Z",
    "updated_at": "2015-10-21T16:45:55Z",
    "closed_at": null,
    "body": "SimpleHTTP is currently defined to use a path that ends in the token value from the challenge, e.g. `.well-known/acme-challenge/evaGxfADs6pSRb2LAv9IZf17Dt3juxGJ-PCt92wr-oA`. Challenge responses are also required to have an empty Content-Type or 'application/jose+json`.\r\n\r\nSince web servers commonly select a Content-Type based on file extension, and may set a default Content-Type for files with no extension, if would be useful to define an extension for the purpose. For instance, we could define the path to end in `.jose`."
  },
  {
    "url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/4",
    "labels_url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/4/labels{/name}",
    "comments_url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/4/comments",
    "events_url": "https://api.github.com/repos/ietf-wg-acme/acme/issues/4/events",
    "html_url": "https://github.com/ietf-wg-acme/acme/issues/4",
    "id": 107788116,
    "number": 4,
    "title": "allow ports other than 443",
    "user": {
      "login": "coolaj86",
      "id": 122831,
      "avatar_url": "https://avatars.githubusercontent.com/u/122831?v=3",
      "gravatar_id": "",
      "url": "https://api.github.com/users/coolaj86",
      "html_url": "https://github.com/coolaj86",
      "followers_url": "https://api.github.com/users/coolaj86/followers",
      "following_url": "https://api.github.com/users/coolaj86/following{/other_user}",
      "gists_url": "https://api.github.com/users/coolaj86/gists{/gist_id}",
      "starred_url": "https://api.github.com/users/coolaj86/starred{/owner}{/repo}",
      "subscriptions_url": "https://api.github.com/users/coolaj86/subscriptions",
      "organizations_url": "https://api.github.com/users/coolaj86/orgs",
      "repos_url": "https://api.github.com/users/coolaj86/repos",
      "events_url": "https://api.github.com/users/coolaj86/events{/privacy}",
      "received_events_url": "https://api.github.com/users/coolaj86/received_events",
      "type": "User",
      "site_admin": false
    },
    "labels": [

    ],
    "state": "open",
    "locked": false,
    "assignee": null,
    "milestone": null,
    "comments": 1,
    "created_at": "2015-09-22T19:50:34Z",
    "updated_at": "2015-10-02T07:55:32Z",
    "closed_at": null,
    "body": "See https://github.com/letsencrypt/acme-spec/issues/33.\r\n\r\nWebservers are already running on 443.\r\n\r\nIf the validation also requires using 443 that means that the admin has to take down their webserver to make port 443 available for the validation and then has to put their webserver back up.\r\n\r\nAlternatively they could use something like HAProxy, but this puts more administrative burden on the user. (I consider myself a fairly knowledgable guy and it took me a few hours of experimentation to arrive at a working solution)\r\n\r\nAlso note that there are a number of ports available for IANA registration:\r\nhttps://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml\r\n\r\nIt looks like port 4 is ripe for an RFC. And 6,8,10,12,14,16,26,28,30,32,34,36,40,60.\r\n\r\nOne of the available ports could be used in place of 443 for validation.\r\n\r\nOr, to make it super simple, the client could request any port below 1024 (or even above it!) to be used for validation / registration."
  }
]