{"action":"created","issue":{"url":"https://api.github.com/repos/certbot/certbot/issues/2084","repository_url":"https://api.github.com/repos/certbot/certbot","labels_url":"https://api.github.com/repos/certbot/certbot/issues/2084/labels{/name}","comments_url":"https://api.github.com/repos/certbot/certbot/issues/2084/comments","events_url":"https://api.github.com/repos/certbot/certbot/issues/2084/events","html_url":"https://github.com/certbot/certbot/issues/2084","id":124809428,"number":2084,"title":"Need Wildcard certificates support | Conflict of interest with CAs?","user":{"login":"HLFH","id":2359059,"avatar_url":"https://avatars.githubusercontent.com/u/2359059?v=3","gravatar_id":"","url":"https://api.github.com/users/HLFH","html_url":"https://github.com/HLFH","followers_url":"https://api.github.com/users/HLFH/followers","following_url":"https://api.github.com/users/HLFH/following{/other_user}","gists_url":"https://api.github.com/users/HLFH/gists{/gist_id}","starred_url":"https://api.github.com/users/HLFH/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/HLFH/subscriptions","organizations_url":"https://api.github.com/users/HLFH/orgs","repos_url":"https://api.github.com/users/HLFH/repos","events_url":"https://api.github.com/users/HLFH/events{/privacy}","received_events_url":"https://api.github.com/users/HLFH/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2016-01-04T18:10:59Z","updated_at":"2016-06-04T16:50:18Z","closed_at":"2016-01-08T04:07:41Z","body":"Hi,\r\n\r\nAccording to [this issue](https://github.com/letsencrypt/letsencrypt/issues/66), there are 51 participants that talked about the support - or not - of wildcard certificates with your Let's Encrypt offering.\r\nI believe it's a huge number and we need: \r\n- the research papers that show the evidence in the fact that wildcard certificates weaken TLS security as you said ;\r\n- the explanation of why it's not a conflict of interest negociated with one of your first sponsors - and your strongest partner also - [named IdenTrust](https://letsencrypt.org/sponsors/): was the deal to weaken the security of your offering and don't offer wildcard certificates to avoid the cannibalization of the CA market?\r\n\r\nThanks,\r\nHLFH"},"comment":{"url":"https://api.github.com/repos/certbot/certbot/issues/comments/223765808","html_url":"https://github.com/certbot/certbot/issues/2084#issuecomment-223765808","issue_url":"https://api.github.com/repos/certbot/certbot/issues/2084","id":223765808,"user":{"login":"MichaelHierweck","id":4266858,"avatar_url":"https://avatars.githubusercontent.com/u/4266858?v=3","gravatar_id":"","url":"https://api.github.com/users/MichaelHierweck","html_url":"https://github.com/MichaelHierweck","followers_url":"https://api.github.com/users/MichaelHierweck/followers","following_url":"https://api.github.com/users/MichaelHierweck/following{/other_user}","gists_url":"https://api.github.com/users/MichaelHierweck/gists{/gist_id}","starred_url":"https://api.github.com/users/MichaelHierweck/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/MichaelHierweck/subscriptions","organizations_url":"https://api.github.com/users/MichaelHierweck/orgs","repos_url":"https://api.github.com/users/MichaelHierweck/repos","events_url":"https://api.github.com/users/MichaelHierweck/events{/privacy}","received_events_url":"https://api.github.com/users/MichaelHierweck/received_events","type":"User","site_admin":false},"created_at":"2016-06-04T16:50:17Z","updated_at":"2016-06-04T16:50:17Z","body":"Would someone please explain what means [ACME Section 6.6](https://tools.ietf.org/html/draft-ietf-acme-acme-01#section-6.6) means in this context: \r\n\r\n> It is up to the server's local policy to decide which names are\r\n   acceptable in a certificate, given the authorizations that the server\r\n   associates with the client's account key.  A server MAY consider a\r\n   client authorized for a wildcard domain if it is authorized for the\r\n   underlying domain name (without the \"*\" label).\r\n\r\nFor my understand this would allow LE to authorize a client for a wildcard domain."}}
{"actor":{"display_login":"MichaelHierweck"}}