Conversation

It's so hard to pick! The upgrade to our database server (in our 200M certs in 24 hours blog post mentioned earlier) was really neat. Also getting Oak, our CT log, online was a really exciting experience too.

Quote Tweet

Let's Encrypt

@letsencrypt

Jun 8, 2021

What are some of the coolest features you have worked on at Let's Encrypt? #ACMEv1 cc: Let's Encrypt SRE Technical Lead @JillianTessa

Show this thread

Jillian Tessa

@JillianTessa

Jun 8, 2021

Oak had to be able to log an incredible amount of certificates every day and meet strict availability guidelines to become trusted. The testing process was robust!

letsencrypt.org

Introducing Oak, a Free and Open Certificate Transparency Log

Update: Feb. 5 2020 The Let’s Encrypt CT logs are now included in approved log lists and are usable by all publicly-trusted certificate authorities. Today we are announcing a new Certificate Transp...

Jillian Tessa

@JillianTessa

Jun 8, 2021

We also made our API even better with multiple-vantage point validation. We worked with

@Princeton

to develop this feature and research it's ability to mitigate BGP attacks

letsencrypt.org

Multi-Perspective Validation Improves Domain Validation Security

At Let’s Encrypt we’re always looking for ways to improve the security and integrity of the Web PKI. We’re proud to launch multi-perspective domain validation today because we believe it’s an...

Replying to

and

Are there plans to deploy the really nice accounturi CAA feature to production? It works well with the staging (dry run) server. It would be nice to have the stronger assurance that intercepting a couple HTTP requests couldn't be used to issue a malicious certificate via LE.

7:42 PM · Jun 8, 2021Twitter Web App