Hacker News new | ask | show | jobs
by benburkert 434 days ago
It's 100% possible today to get certs in segmented networks without a new ACME challenge type: https://anchor.dev/docs/public-certs/acme-relay

(disclamer: i'm a founder at anchor.dev)
1 comments
webprofusion 434 days ago
Does your hosted service know the private keys or are they all on the client?
link
benburkert 433 days ago
No, they stay on the client, our service only has access to the CSR. From our docs:

> The CSR relayed through Anchor does not contain secret information. Anchor never sees the private key material for your certificates.

link