HTTP proves control of a path
03The client publishes a key authorization at a server-chosen challenge path.
Terms in this drawing
Related RFCs and changes
“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.
DIAGRAM§ 8.3 ↗
RFC 8555 · § 8.3EXAMPLE
3 / 3
03
Compare
Correct content satisfies the challenge; an unrelated page does not.
Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
Read the updated RFC section ↗
http-01 uses the /.well-known/acme-challenge/ path.
- http-01 uses the /.well-known/acme-challenge/ path.
- The check is performed over HTTP on port 80.
- The published value binds the challenge token to the account key.
The illustration is schematic. Example values are illustrative; profiles and later security guidance can add requirements.
Read the RFC section ↗Diagrams simplify the RFC. Read the linked sections for complete requirements.
Privacy