Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unclear description of Renewal Exemption and Duplicate Certificates #439

Closed
Greek64 opened this issue Jan 6, 2019 · 1 comment
Closed

Comments

@Greek64
Copy link

Greek64 commented Jan 6, 2019

@cpu I would like to continue our conversation from here until I understand how the rate limits work.
Then I will probably make a PR to address this issue.

To make sure you can always renew your certificates when you need to, we have a Renewal Exemption to the Certificates per Registered Domain limit.

This sentence is too ambiguous IMO, and suggests that I can always renew a certificate (i.e. no rate limit for renewals)

Even if you’ve hit the limit for the week,

Even if the limit this sentence refers to is probably the Certificates per Registered Domain limit mentioned in the previous sentence, it is still a bit vague saying the limit in a page that mentions several different limits.

This is the same definition used for the Duplicate Certificate limit described above. Renewals are still subject to the Duplicate Certificate limit.

So, correct me if I'm wrong, but the only difference between a Duplicate Certificate and a Renewal Certificate is that the Duplicate Certificates count against the Certificates per registered Domain limit in addition to their own Duplicate limit, but the Renewal Certificates count only towards the Duplicate limit.
In other words, you can have a Renewal Certificate (in the sense of this definition) only if you have hit the Certificates per registered Domain limit for that week.

If so, why even bother too differentiate them? This just makes things confusing.
Just state the definition of a renewal (same set of hostnames), the renewal limit (5 per week), and that the renewals are counted against the Certificates per registered Domain limit, BUT are not limited by it.

@jsha
Copy link
Contributor

jsha commented Jan 8, 2019

There no difference between Duplicate certificates and Renewal certificates. I'm definitely open to amending the language for clarity. Maybe it makes sense to first define "Renewal," and say there is both a Renewal Exemption to the per-domain limit, and an independent limit on Renewals?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants