diff --git a/draft.xml b/draft.xml index c4495a8..190546a 100644 --- a/draft.xml +++ b/draft.xml @@ -279,13 +279,13 @@ Content-Type: application/jose+json -On receiving a response, the server constructs and stores the key authorization from the challenge token value and the current client account key. +On receiving this response, the server validates the message and constructs and stores the key authorization from the challenge token value and the current client account key. To validate the dns-account-01 challenge, the server performs the following steps: Compute the SHA-256 digest of the stored key authorization - Compute the validation domain name with the account URL of the ACME account requesting validation and the associated authorization, similar to the client logic + Compute the validation domain name with the KID value in the JWS message Query for TXT records for the validation domain name Verify that the contents of one of the TXT records match the digest value @@ -558,116 +558,116 @@ Reference: This document diff --git a/index.html b/index.html index bffcb1f..e809f78 100644 --- a/index.html +++ b/index.html @@ -1609,12 +1609,12 @@

-

On receiving a response, the server constructs and stores the key authorization from the challenge token value and the current client account key.

+

On receiving this response, the server validates the message and constructs and stores the key authorization from the challenge token value and the current client account key.

To validate the dns-account-01 challenge, the server performs the following steps: