Update rate limits doc for IP address identifiers#1933
Conversation
| If you're requesting a certificate for an IP address, this rate limit evaluates | ||
| an IPv4 address as if it's a registered domain. For IPv6 addresses, it evaluates | ||
| the /64 range that contains the address. |
There was a problem hiding this comment.
This phrasing feels awkward to me for some reason. It definitely works, but I'm gonna try to brainstorm something different. Maybe:
For IP addresses, we also try to treat the usual unit of sale (what you'd buy from your ISP or hosting provider) as the "registered domain". So for IPv4 addresses, we treat the exact address as the registered domain, and for IPv6 addresses, we treat the containing /64 range as the registered domain.
Does that sound better? I'm honestly not sure.
There was a problem hiding this comment.
I mashed these up a little. I wanted to keep the first clause to try to minimize anticipated confusion about the client's IP address connecting to the API (not this rate limit) vs. an IP address identifier in the certificate (yes this rate limit).
A previous website pull request (letsencrypt/website#1933) modified documentation anchor links so they no longer align with those referenced in Boulder error messages. Update documentation hyperlinks in Boulder errors to match the website changes: - https://letsencrypt.org/docs/rate-limits/#authorization-failures-per-identifier-per-account - https://letsencrypt.org/docs/rate-limits/#new-registrations-per-ip-address
Update
docs/rate-limits.mdto replace most uses of the word "hostname" with "identifier," and clarify at relevant points that certificates may contain IP address identifiers.This includes most rate limit names in the doc, since they already differ slightly from what's returned by the API. This does not yet include "registered domains," since that phrase closely tracks what the API uses and has not yet renamed.
Also, replace "smart apostrophes" with ASCII apostrophes, since their usage was already inconsistently mixed throughout the doc.