Subject: [hackathon] ACME STAR

From: "Fossati, Thomas (Nokia - GB/Cambridge, UK)" <[email-masked]>
Date: Mon, 26 Jun 2017 08:07:35 +0000

Hi again,

ACME STAR

§  Champions

§  Thomas Fossati ([email-masked])

§  Integrate ACME-STAR with STAR-request

§  ACME-STAR [https://tools.ietf.org/html/draft-ietf-acme-star-00]<https://tools.ietf.org/html/draft-ietf-acme-star-00%5D> is an ACME extension that allows automatic renewal of short-term certificates

§  STAR-request [https://tools.ietf.org/html/draft-sheffer-acme-star-request-01]<https://tools.ietf.org/html/draft-sheffer-acme-star-request-01%5D> is a protocol for asking a domain name holder a rolling set of short term certificates for a keypair that is held by a third party with a domain holder's name. Typically, the use case is that of a CDN edge cache that needs to answer HTTPS requests for URLs that have the domain name holder's authority.

§  Code repo

§  https://github.com/mami-project/lurk

§  https://github.com/letsencrypt/boulder

§  Project Goals

§  implement the two specs as far as needed to implement an “happy” end-to-end scenario

Cheers, t