search

letsencrypt / website

Let's Encrypt Website and Documentation
https://letsencrypt.org
Mozilla Public License 2.0
841 stars 573 forks source link

chore: mention that domain names are not obscured when using http/tls-alpn challenges #1695

Closed pimlie closed 2 months ago

pimlie commented 2 months ago

Resolves #1694

Add explicit information about certificates and their domain names not being obscured when using HTTP or TLS-ALPN challenge types as they can be extracted from the Certificate Transparency logs

aarongable commented 2 months ago

See my comment on the associated bug -- while CT can be somewhat surprising, the three validation methods do not behave differently with regards to submitting certificates (and therefore issued names) to CT logs. Therefore it is not appropriate to include this as a "con" on the descriptions of the HTTP-01 and TLS-ALPN-01 methods.