Jacob Hoffman-Andrews

FWIW I agree with `wontfix`. I ran into this a while ago too, and after some research concluded that it's quite uncommon for servers to automatically handle compressed POST bodies....

> Is the change to the ca.json log levels intentional? Or is that just from your own debugging? Just for personal testing / if anyone else wanted to try this...

I've updated the top comment to show the most recent iteration of the JSON output.

Thanks, bot! This deprecates a flag that is already enabled; we'll do cleanup of deprecated configs from prod deploys in a later batch.

I originally drafted this in a text file locally, and when I pasted it into this issue, I omitted a whole section! Sorry about that. I've edited the original post...

We've previously decided we'll store this information in the lineage config. Focusing on storing the Retry-After information: after calling `acme.renewal_time()` in renewal.py we need to call something that will update...

The main reason I'm thinking about doing it that way is to be sure it doesn't mutate any other settings in the file. For instance if someone does `certbot renew...

Thanks for the note, @mesoylu! Sorry these changes caused you unnecessary alerts. That's a downside to our use of /etc/letsencrypt/ to store frequently changing data, which I'll admit is a...

Hi @sheurich, It's been a while since I looked at this PR and I realize it's grown a lot bigger since I last looked at it! Some of the things,...

We ran into a stumbling block in https://github.com/letsencrypt/boulder/pull/8408#discussion_r2430553822. Right now in prod we have no index on `serials` in the `revokedCertificates` table. We're planning to add a non-unique index (#8427),...