From: invalid@invalid.invalid   
      
   Theo  writes:   
   > Richard Kettlewell  wrote:   
   >> Right, the organizations who will have a real problem are those still   
   >> renewing certificates manually. They have a choice between spending a   
   >> bit more on their own staffing, or automating renewal (probably   
   >> cutting their overall costs in the long run).   
   >   
   > I can see this being a big pain for private infrastructure.  Much   
   > networking gear, for example, has a web interface for uploading a   
   > certificate, but not an automated flow for doing so.  If that gear is   
   > also not able to reach the internet it can't do any kind of   
   > 'well-known' challenges.   
      
   Fair point. I think SCEP is the well-established ‘enterprise’ approach   
   to this (I don’t know the details though). But it’d be nice to see   
   device vendors supporting ACME more widely.   
      
   --   
   https://www.greenend.org.uk/rjk/   
      
   --- SoupGate-DOS v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)