{"action":"created","issue":{"url":"https://api.github.com/repos/aspnet/Home/issues/1190","repository_url":"https://api.github.com/repos/aspnet/Home","labels_url":"https://api.github.com/repos/aspnet/Home/issues/1190/labels{/name}","comments_url":"https://api.github.com/repos/aspnet/Home/issues/1190/comments","events_url":"https://api.github.com/repos/aspnet/Home/issues/1190/events","html_url":"https://github.com/aspnet/Home/issues/1190","id":123281969,"number":1190,"title":"Let's Encrypt and SCIM","user":{"login":"b3nt0","id":1512025,"avatar_url":"https://avatars.githubusercontent.com/u/1512025?v=3","gravatar_id":"","url":"https://api.github.com/users/b3nt0","html_url":"https://github.com/b3nt0","followers_url":"https://api.github.com/users/b3nt0/followers","following_url":"https://api.github.com/users/b3nt0/following{/other_user}","gists_url":"https://api.github.com/users/b3nt0/gists{/gist_id}","starred_url":"https://api.github.com/users/b3nt0/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/b3nt0/subscriptions","organizations_url":"https://api.github.com/users/b3nt0/orgs","repos_url":"https://api.github.com/users/b3nt0/repos","events_url":"https://api.github.com/users/b3nt0/events{/privacy}","received_events_url":"https://api.github.com/users/b3nt0/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/aspnet/Home/labels/discussion","name":"discussion","color":"009800"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":5,"created_at":"2015-12-21T13:44:47Z","updated_at":"2016-06-08T21:39:41Z","closed_at":null,"body":"Would asp.net benefit from having https://letsencrypt.org/ support for automatically getting and renewing SSL certificates for a user site? They've defined a lightweight protocol called ACME for requesting, verifying, and installing an SSL certificate. This would be great. SSL all the things.\r\n\r\nAlso, Azure AD has announced support for SCIM 2.0 (http://www.simplecloud.info/) for provisioning user accounts into an application or service. Instead of integrating directly with Azure AD via the grpah api, lot's of services need their own user directory. SCIM provides a standard API for getting users and groups in and out of a service. When doing the \"individual accounts\" option in Asp.net tooling it would be great if these end points were exposed for the default user schema.\r\n\r\nI posted this on forums.asp.net and they pointed me over here. They mentioned that these features should probably be a nuget package, like everything else these days, but there is a boost to adoption that comes from being \"in the defaults\" that \"SSL Everywhere\" could definitely use. It also seems like it's in everyone's interest that standardized user provisioning get some support. Like I said, the AAD team released support for it for that reason. The more people using the cloud the better, right?"},"comment":{"url":"https://api.github.com/repos/aspnet/Home/issues/comments/224737478","html_url":"https://github.com/aspnet/Home/issues/1190#issuecomment-224737478","issue_url":"https://api.github.com/repos/aspnet/Home/issues/1190","id":224737478,"user":{"login":"blowdart","id":796298,"avatar_url":"https://avatars.githubusercontent.com/u/796298?v=3","gravatar_id":"","url":"https://api.github.com/users/blowdart","html_url":"https://github.com/blowdart","followers_url":"https://api.github.com/users/blowdart/followers","following_url":"https://api.github.com/users/blowdart/following{/other_user}","gists_url":"https://api.github.com/users/blowdart/gists{/gist_id}","starred_url":"https://api.github.com/users/blowdart/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/blowdart/subscriptions","organizations_url":"https://api.github.com/users/blowdart/orgs","repos_url":"https://api.github.com/users/blowdart/repos","events_url":"https://api.github.com/users/blowdart/events{/privacy}","received_events_url":"https://api.github.com/users/blowdart/received_events","type":"User","site_admin":false},"created_at":"2016-06-08T21:39:41Z","updated_at":"2016-06-08T21:39:41Z","body":"As our recommendation for Kestrel is to host it behind IIS or nginx  it's not something we'd be looking at. Kestrel's SSL support is for proxy -> Kestrel, and as we don't have any watchdog timers to even detect cert expiration it's a non-starter right now.\r\n\r\n "}}
{"actor":{"display_login":"blowdart"}}