The Let’s Encrypt team is excited to announce that ACME Renewal Information (ARI) is live in production! ARI makes it possible for our subscribers to handle certificate revocation and renewal as easily and automatically as the process of getting a certificate in the first place.
With ARI, Let’s Encrypt can signal to ACME clients when they should renew certificates. In the normal case of a certificate with a 90 day lifetime, ARI might signal for renewal at 60 days. If Let’s Encrypt needs to revoke a certificate for some reason, ARI can signal that renewal needs to happen prior to the revocation. This means that even in extenuating circumstances, renewal can happen in an entirely automated way without disrupting subscriber services.
Without ARI, an unexpected revocation event might mean that Let’s Encrypt would have to send emails to affected subscribers, maybe those emails are read in time to avoid a service disruption, maybe they aren’t, and engineers have to manually take action to trigger early renewals, possibly in the middle of the night. We can’t wait for ARI to make this scenario a thing of the past.
ARI has a couple of additional benefits for Let’s Encrypt and our subscribers. First, we can use ARI to help modulate renewals as needed to avoid load spikes on the Let’s Encrypt infrastructure (of course subscribers can still renew whenever they want or need, as ARI is merely a signal or suggestion). Second, ARI can be used to set subscribers up for success in terms of ideal renewal times in the event that Let’s Encrypt offers even shorter-lived certificates in the future.
ARI has been standardized in the IETF, a process that started with an email from Let’s Encrypt engineer Roland Shoemaker in March of 2020. In September of 2021 Let’s Encrypt engineer Aaron Gable submitted the first draft to the IETF’s ACME working group, and now ARI is in production. The next step is for ACME clients to start supporting ARI, a process we plan to help with as best we can in the coming months.
ARI is a huge step forward for agility and resiliency in the TLS certificate ecosystem and we’re excited to see it gain widespread adoption!
As a project of the Internet Security Research Group (ISRG), 100% of our funding comes from contributions from our community of users and supporters. We depend on their support in order to provide our public benefit services. If your company or organization would like to sponsor Let’s Encrypt please email us at sponsor@letsencrypt.org. If you can support us with a donation, we ask that you make an individual contribution.
| 国企是什么编制 | 低血压吃什么水果 | 虫草花是什么 | pd是什么意思 | 布帛是什么意思 |
| 红花泡脚有什么好处 | 中耳炎吃什么药最有效 | 北面是什么档次的牌子 | 双向转诊是什么意思 | 为什么会流鼻血 |
| 梦见撒尿是什么意思 | 婴儿眼屎多是什么原因 | 什么是陈述句 | 云吞面是什么面 | 散光是什么原因导致的 |
| media是什么意思 | nilm是什么意思 | 馀是什么意思 | 艾滋什么症状 | 什么颜色的衣服显白 |
| 突然心跳加快是什么原因hcv8jop8ns7r.cn | 做什么动作可以长高hcv7jop9ns0r.cn | 熬夜喝什么提神醒脑wuhaiwuya.com | 蔻驰手表属于什么档次jasonfriends.com | 氯读什么拼音hcv9jop7ns2r.cn |
| 脑软化灶是什么意思hcv8jop2ns7r.cn | 9月9日是什么星座hcv9jop6ns1r.cn | 蛇屎是什么样子hcv7jop9ns8r.cn | 步步为营是什么意思hcv9jop6ns7r.cn | 被蝎子蛰了有什么好处hcv8jop1ns2r.cn |
| 白醋洗脸有什么好处hcv7jop6ns8r.cn | 护照和签证有什么区别hcv8jop5ns8r.cn | 思伤脾是什么意思beikeqingting.com | 过氧化氢阳性是什么意思hcv7jop4ns5r.cn | 闭麦是什么意思hcv7jop9ns7r.cn |
| 牛大力泡酒有什么功效hcv8jop4ns6r.cn | 狗女和什么属相最配hcv9jop4ns7r.cn | 西楚霸王是什么生肖hcv9jop7ns0r.cn | 龛是什么意思aiwuzhiyu.com | 开塞露用多了有什么副作用hcv8jop4ns4r.cn |