News for hackers. Stuff that matters.

A comment on Let's Encrypt: Active Incident, DNS errors causing service disruption. Parent comment

Re:Let's Encrypt: Active Incident, DNS errors causing servic... by breser on Friday April 15, 2016 @01:28PM (#11506095)
That's not exactly true. You can renew it before it expires. You just can't renew it until it is nearly expired. I think it's like a 2 week window or something like that.

The bigger complaint about StartSSL should be that if you need to revoke the certificate you have to pay for it.

For a free service though I don't think their requirements are too terrible.

[ Parent | on HN ]
Re:Let's Encrypt: Active Incident, DNS errors causing servic... by geofft on Friday April 15, 2016 @01:37PM (#11506182)
That wouldn't be such a problem given that most SSL stacks (correctly, IMO) ignore revocation checking... except that you can't get a new cert without revoking the old one. It would otherwise be reasonable to determine you don't care about getting it revoked (and therefore don't want to fund the revocation infrastructure, like a highly-available OCSP responder) but you just want a new cert.
[ Parent | on HN ]