{"action":"created","issue":{"url":"https://api.github.com/repos/letsencrypt/letsencrypt/issues/1492","labels_url":"https://api.github.com/repos/letsencrypt/letsencrypt/issues/1492/labels{/name}","comments_url":"https://api.github.com/repos/letsencrypt/letsencrypt/issues/1492/comments","events_url":"https://api.github.com/repos/letsencrypt/letsencrypt/issues/1492/events","html_url":"https://github.com/letsencrypt/letsencrypt/issues/1492","id":116807364,"number":1492,"title":"Renewal Method?","user":{"login":"liqi328","id":1277016,"avatar_url":"https://avatars.githubusercontent.com/u/1277016?v=3","gravatar_id":"","url":"https://api.github.com/users/liqi328","html_url":"https://github.com/liqi328","followers_url":"https://api.github.com/users/liqi328/followers","following_url":"https://api.github.com/users/liqi328/following{/other_user}","gists_url":"https://api.github.com/users/liqi328/gists{/gist_id}","starred_url":"https://api.github.com/users/liqi328/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/liqi328/subscriptions","organizations_url":"https://api.github.com/users/liqi328/orgs","repos_url":"https://api.github.com/users/liqi328/repos","events_url":"https://api.github.com/users/liqi328/events{/privacy}","received_events_url":"https://api.github.com/users/liqi328/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/letsencrypt/letsencrypt/labels/acme","name":"acme","color":"888888"},{"url":"https://api.github.com/repos/letsencrypt/letsencrypt/labels/spec-compliance","name":"spec-compliance","color":"eb6420"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-11-13T16:57:35Z","updated_at":"2015-11-13T21:06:30Z","closed_at":"2015-11-13T21:06:30Z","body":"Your ACME spec in the issuance section explains that a renewed certificate can be obtained by performing an unauthenticated GET request at the URI created when the cert is generated, but I can't find any evidence of this in this repo or others. Is the spec correct?\r\n\r\nHaving to use user key for a simple renewal weakens the security model, and a full authenticated renewal is also not very convenient for websites behind load balancers or with unique setups.\r\n\r\nClarification on what the actual renewal situation is or will be during the public beta or launch would be helpful.\r\n\r\nThank you."},"comment":{"url":"https://api.github.com/repos/letsencrypt/letsencrypt/issues/comments/156556905","html_url":"https://github.com/letsencrypt/letsencrypt/issues/1492#issuecomment-156556905","issue_url":"https://api.github.com/repos/letsencrypt/letsencrypt/issues/1492","id":156556905,"user":{"login":"kuba","id":106176,"avatar_url":"https://avatars.githubusercontent.com/u/106176?v=3","gravatar_id":"","url":"https://api.github.com/users/kuba","html_url":"https://github.com/kuba","followers_url":"https://api.github.com/users/kuba/followers","following_url":"https://api.github.com/users/kuba/following{/other_user}","gists_url":"https://api.github.com/users/kuba/gists{/gist_id}","starred_url":"https://api.github.com/users/kuba/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kuba/subscriptions","organizations_url":"https://api.github.com/users/kuba/orgs","repos_url":"https://api.github.com/users/kuba/repos","events_url":"https://api.github.com/users/kuba/events{/privacy}","received_events_url":"https://api.github.com/users/kuba/received_events","type":"User","site_admin":false},"created_at":"2015-11-13T21:06:30Z","updated_at":"2015-11-13T21:06:30Z","body":"We implement it in https://github.com/letsencrypt/letsencrypt/blob/v0.0.0.dev20151108/acme/acme/client.py#L417, but it's not used anywhere in the code base because Boulder is not yet ready: https://github.com/letsencrypt/boulder/issues/359."}}