News for hackers. Stuff that matters.
Re:Get HTTPS for free by src on Saturday January 30, 2016 @11:13PM (#11005195)
Free is great. My only issue with LetsEncrypt is that the certificates are only valid for 3 months. It's a hassle to keep updating the certs...

I just switched to AWS Cert Manager last month from StartSSL, which is free if you're an AWS customer.

Re:Get HTTPS for free by ymse on Saturday January 30, 2016 @11:18PM (#11005202)
3 months expiry time was a deliberate choice to force users to automate the process. Ideally you would have a central store with a letsencrypt client, and all your actual web servers periodically fetch their certs from there.
Re:Get HTTPS for free by src on Saturday January 30, 2016 @11:49PM (#11005267)
That's great except the web server (except apache/nginx) needs to be restarted to load new certs, which isn't ideal for production. Many cloud hosting providers don't have an automated way to update certs, which makes it more tedious.
Re:Get HTTPS for free by pfg on Sunday January 31, 2016 @05:12AM (#11005915)
Both apache and nginx support graceful reloads which will reload the certificates without any downtime.