Use of Short-Term, Automatically-Renewed (STAR) Certificates to address the LURK problem

This memo proposes two mechanisms that work in concert to address the LURK problem statement, allowing a third party (e.g., a content delivery network) to terminate TLS sessions on behalf of a domain name owner (e.g., a content provider). The proposed mechanisms are: