Feature #3649
closedAutomated email-verified certificate issuance
100%
Description
Currently, every certificate request must be manually processed by the institution's operator.
After the automated system verifies the email inbox, the operator is expected to verify the information looks correct if the requester is known to the operator, or contact the requester if not known.
Per testbed policy, the operator is required to read emails every 24 hours.
Thus, this procedure injects a delay of up to 24 hours during certificate issuance.
In some cases, it's desirable for an end user to obtain a certificate right away, such as during an application installation where the application requires a testbed certificate to operate.
ndncert system should offer the option to issue an email-verified certificate automatically.
Such a certificate contains only the email address of the requester, which has been verified through the automated system, but does not contain any other information. Therefore, it does not need the operator to verify "the information looks correct" because there isn't any information to verify.
Automated issuance would allow an application installation to be similar to registering an account on a website, and the user doesn't have the wait for manual approval.