Michael Malone

@doug-fitzmaurice-rowden awesome! I'd love to see this functionality in `step`. Some thoughts on the API: * There's no hard rule, but we generally prefer positional arguments over flags if an...

Thanks for the feedback! Do you think your workaround is the best solution for now? Is this a documentation bug or should we change CLI behavior? We don't have a...

Oh, man. Honestly, this is a corner of the codebase that I haven't looked at in a long time and I'm glad to see that someone is getting value out...

You didn't miss anything. This is a problem with ACME. The challenge here is that the sorts of policies people want to capture vary quite a bit. We have some...

Sorry, yea, what I meant was we could borrow the syntax and semantics of name constraints and re-use them to restrict certificate issuance on a per-provisioner basis. The question of...

> One more powerful approach could be to have some kind of "policy engine" You read our minds. We have a pretty awesome policy engine that we're going to release...

Has anyone tried changing `ca.dns` and/or `ca.url` in the helm values? The CA has two different settings to support this use case already: one specified where it listens, the other...