News for hackers. Stuff that matters.

A comment on Rate Limits. Parent comment

Re:Rate Limits by finnn on Wednesday August 17, 2016 @02:21PM (#12306989)
The few times I've had Let's Encrypt's automation fail it's taken a few minutes, not hours, to investigate and fix. Anecdotal, sure, but I don't see it taking hours to fix
[ Parent | on HN ]
Re:Rate Limits by toomuchtodo on Wednesday August 17, 2016 @03:08PM (#12307438)
Anecdotal, but managing thousands of VMs, hundreds of ELBs, service discovery, several CI pipelines, and so on, its never a few minutes unless its a blatant misconfigured flag.
[ Parent | on HN ]
Re:Rate Limits by jessaustin on Wednesday August 17, 2016 @04:54PM (#12308383)
It sounds as if your organization would be a customer for a different service than the one that LE provides.
[ Parent | on HN ]
Re:Rate Limits by viraptor on Wednesday August 17, 2016 @08:11PM (#12309528)
If you're issuing lots of internal certificates, you may be interested in using Anchor [1] instead. It's designed for that use case and with own service you don't need to worry about rate limits, name limits of similar issues.

While it's designed to cycle all your certificates every day, you can still configure it for weeks/months. It's also based on credentials rather than domain verification (shameless plug, I'm Anchor developer)

[1] https://github.com/openstack/anchor

[ Parent | on HN ]