diff --git a/draft-ietf-acme-acme.md b/draft-ietf-acme-acme.md index a2cd7dd5..aa982358 100644 --- a/draft-ietf-acme-acme.md +++ b/draft-ietf-acme-acme.md @@ -1948,6 +1948,8 @@ domain by verifying that the resource was provisioned as expected. 5. Verify that key authorization provided by the HTTP server matches the token for this challenge and the client's account key. +The server SHOULD follow redirects when dereferencing the URI. + If all of the above verifications succeed, then the validation is successful. If the request fails, or the body does not pass these checks, then it has failed.