News for hackers. Stuff that matters.

A comment on Let's Encrypt Has Issued a Billion Certificates. Parent comment

Re:Let's Encrypt Has Issued a Billion Certificates by gregmac on Thursday February 27, 2020 @12:50PM (#22435680)
The default setup is to renew 30 days before expiry. If it fails at that point, you still have 30 days for your "fallback" to kick in.

I'm not sure it's worthwhile that your fallback is either ACME or automated. In fact, the failure isn't even one that should page anyone in the middle of the night; 30 days gives enough time to manually sort things out during regular work hours.

[ Parent | on HN ]
Re:Let's Encrypt Has Issued a Billion Certificates by mytailorisrich on Thursday February 27, 2020 @01:54PM (#22436470)
Sure. However, it costs nothing to have multiple providers with automated retries and fallbacks.

I like my automated functions to stay that way as long as possible!

Redundancy of suppliers (of anything) is a general good practice.

[ Parent | on HN ]