ietf-wg-dnsop / draft-ietf-dnsop-domain-verification-techniques

IETF draft surveying DNS domain verification techniques.
https://ietf-wg-dnsop.github.io/draft-ietf-dnsop-domain-verification-techniques/
Other
6 stars 9 forks source link

Multi-provider / multi-CDN setups #69

Closed moonshiner closed 3 months ago

moonshiner commented 1 year ago

(from Erik)

A related and messier corner-case are multi-provider / multi-CDN setups. For example, "foo.example.com" may CNAME to one of three different CDNs. Each one of these needs to be able to manage a certificate and renew it every three months. This likely applies to some of these other cases as well.
I don't have good answers --- ACME doesn't handle this terribly well today --- but it is worth some thought as to how to handle.

moonshiner commented 5 months ago

I do believe this has been covered in the document. someone confirms and close?

moonshiner commented 3 months ago

I believe this has been address and can be closed

paulwouters commented 3 months ago

I think so too.