News for hackers. Stuff that matters.

A comment on Let's Encrypt Has Issued a Billion Certificates. Parent comment

Re:Let's Encrypt Has Issued a Billion Certificates by mytailorisrich on Thursday February 27, 2020 @11:56AM (#22435035)
The same rule as for any critical system applies: Make sure your site uses 2 ACME providers and implement fallback on failure.
[ Parent | on HN ]
Re:Let's Encrypt Has Issued a Billion Certificates by gregmac on Thursday February 27, 2020 @12:50PM (#22435680)
The default setup is to renew 30 days before expiry. If it fails at that point, you still have 30 days for your "fallback" to kick in.

I'm not sure it's worthwhile that your fallback is either ACME or automated. In fact, the failure isn't even one that should page anyone in the middle of the night; 30 days gives enough time to manually sort things out during regular work hours.

[ Parent | on HN ]
Re:Let's Encrypt Has Issued a Billion Certificates by mytailorisrich on Thursday February 27, 2020 @01:54PM (#22436470)
Sure. However, it costs nothing to have multiple providers with automated retries and fallbacks.

I like my automated functions to stay that way as long as possible!

Redundancy of suppliers (of anything) is a general good practice.

[ Parent | on HN ]
Re:Let's Encrypt Has Issued a Billion Certificates by sschueller on Thursday February 27, 2020 @02:57PM (#22437139)
Who else provides free ACME other than let's encrypt?
[ Parent | on HN ]
Re:Let's Encrypt Has Issued a Billion Certificates by alwillis on Friday February 28, 2020 @02:44AM (#22441197)
Buypass does ACME—https://www.buypass.com/ssl/products/acme
[ Parent | on HN ]