Let's Encrypt宣布将增加两个额外的远程验证视角用于域名验证1。此项变更将验证请求总数从五个增加至七个，其中包含一个主数据中心加上六个远程视角，相比之前的一个主数据中心加四个远程视角的配置有所扩展1。这一调整是为了满足基线要求中2026年12月15日生效的多视角发行印证规定1。
新规范要求认证机构至少使用5个远程网络视角，并且这些远程视角必须覆盖至少2个不同的区域互联网注册表服务区域1。验证成功需要主服务器和至少一定数量的远程视角接收到正确的质询响应1。增加远程验证视角的目的在于提高域名验证的安全性，防范BGP攻击1。
Let's Encrypt已经制定了具体的部署时间表1。暂存环境测试计划于2026年10月27日开始，生产环境将于2026年11月10日上线1。
Let's Encrypt has announced an expansion of its domain validation process by adding two more remote perspectives to strengthen security against network-based attacks. 1 The modification will increase validation requests from five to seven total—comprising one primary data center plus six remote perspectives, up from the previous configuration of one primary plus four remote viewpoints. 1 This enhancement aligns with baseline requirements mandating that certificate authorities implement multi-perspective issuance validation by December 15, 2026, utilizing at least five distinct remote network perspectives. 1
The remote perspectives must span at least two different Regional Internet Registry service areas to ensure geographic diversity in validation checks. 1 Successful validation will require confirmation from the primary server and a minimum threshold of remote perspectives receiving correct challenge responses. 1 Let's Encrypt will begin testing the changes in its staging environment on October 27, 2026, with production deployment scheduled for November 10, 2026. 1
评论
还没有评论，欢迎留下第一条。