Re:Chrome 68 will mark all HTTP sites as “not secure”
by skrebbel on Thursday February 08, 2018 @02:43PM
(#16334963)
There's plenty shared hosting provider that just have a free let's encrypt powered "https" toggle.
Eg tools like cPanel have built in support for it now.
Re:Chrome 68 will mark all HTTP sites as “not secure”
by ams6110 on Thursday February 08, 2018 @07:33PM
(#16336894)
Right -- so the security of a "Let's Encrypt" certificate is very minimal. It prevents MITM shenanigans and that's about it.
Re:Chrome 68 will mark all HTTP sites as “not secure”
by CydeWeys on Thursday February 08, 2018 @09:15PM
(#16337385)
And spying/surveillance/analytics/snooping. That's not minimal. And you get all those benefits from checking a checkbox in cPanel and the rest is handled automatically? Who could be against that?!
Re:Chrome 68 will mark all HTTP sites as “not secure”
by JankySolutions on Friday February 09, 2018 @01:40AM
(#16338389)
What other shenanigans are you concerned about? MITM and sniffing are basically what https/tls are designed to prevent.
Re:Chrome 68 will mark all HTTP sites as “not secure”
by anchpop on Saturday February 10, 2018 @05:27PM
(#16350004)
There's shenanigans like "grnail.com" pretending to be "gmail.com" which bigger and much more expensive certs prevent against. But the benefit of https that doesn't prevent against this is still very high
Re:Chrome 68 will mark all HTTP sites as “not secure”
by tokenizerrr on Thursday February 08, 2018 @02:38PM
(#16334921)
1. You don't have to monitor your cronjobs. They'll send you an email when they produce output.
2. Let's Encrypt will send you an email if your certificate is going to expire in a month. This will normally never happen, since it is continuously renewed.
Re:Chrome 68 will mark all HTTP sites as “not secure”
by TeMPOraL on Thursday February 08, 2018 @03:14PM
(#16335207)
> 1. You don't have to monitor your cronjobs. They'll send you an email when they produce output.
You now have to configure e-mail on your small server to actually work (and not get immediately eaten by spam filters of your personal e-mail provider).
Re:Chrome 68 will mark all HTTP sites as “not secure”
by jacobparker on Thursday February 08, 2018 @04:04PM
(#16335588)
The email doesn't come from your server, it comes from Lets Encrypt.
Cron jobs fail sometimes. You have to monitor them, investigate why they failed, fix the issue, and rerun them.
Web servers fail, too, but with shared hosting, it's mostly not your problem. And shared hosting providers are still trying to charge an arm and a leg to manage SSL certs for you (because it's a nice high-margin business for them).