News for hackers. Stuff that matters.
Re:Rate Limits by JoshTriplett on Wednesday August 17, 2016 @12:39PM (#12305977)
> What I find more inconvenient than any of those limits (as a non-power user) is the 3 month lifetime of certs. I am a windows user. Running a VM once a month just to renew my 3 certs is a huge headache. Will it really be that much of a burden to have like a year?

You shouldn't do anything by hand to renew certificates. The short certificate lifetime encourages you to automate the process.

Clients exist for Windows, and web servers exist for Windows that include native support for ACME and Let's Encrypt.

Re:Rate Limits by ryandrake on Wednesday August 17, 2016 @01:50PM (#12306669)
I experimented with LetsEncrypt a few months ago, and found the process to be VERY manual. This was on a bog-standard Debian install running common web software (lighttpd) with a few vhosts. Certbot does not seem to support lighttpd, so it's: download this third party script, run this, copy that, run this, cat these files together, restart the web server process, etc. Sure, that can all be cobbled together with your own mega-script, but at that point, you start just looking for another provider (which OP did). If I were not as comfortable with the command line as I am, I'd have found the initial setup to be daunting, let alone automating it.
Re:Rate Limits by JoshTriplett on Wednesday August 17, 2016 @01:59PM (#12306740)
Even better than certbot supporting it would be if lighttpd supported ACME natively. You might file a feature request with lighttpd requesting native ACME/LE support.
Re:Rate Limits by Achshar on Wednesday August 17, 2016 @12:46PM (#12306048)
Those aren't really an option for me, I use shared hosting without command line access. I realize this is an issue specific to my case but I know many other people that have their own small sites running on similar hosting as mine.
Re:Rate Limits by schoen on Wednesday August 17, 2016 @12:55PM (#12306160)
If continuing to use your current hosting provider is important to you, I suggest you ask them to integrate Let's Encrypt on their end. (That could include just letting you get Let's Encrypt certs through cPanel; it doesn't necessarily have to mean a lot of coding for them.) We've been talking to a number of providers of various shapes and sizes who are doing this or planning to do it. It's the best option for hosting environments where the customer doesn't have administrative access.
Re:Rate Limits by hannob on Wednesday August 17, 2016 @12:52PM (#12306117)
Your web hoster should integrate a way to automatically get certificates. Many already do. If they don't offer that you may want to consider using another webhoster.
Re:Rate Limits by iokanuon on Wednesday August 17, 2016 @01:56PM (#12306710)
If you have it scripted in a vm, I think that you should set up a vps that turns on every month and runs it.
Re:Rate Limits by makomk on Wednesday August 17, 2016 @03:50PM (#12307809)
Ah. I think the trouble is that Lets Encrypt was created and promoted by tech people like me who like having their own VPS with root access.