Re:Now I understand why almost no one uses encrypted email
by recursive on Thursday April 16, 2020 @10:00PM
(#22895529)
Some of our customers have no trouble with certificates. The others have never heard of ACME.
[ Parent
| on HN ]
Re:Now I understand why almost no one uses encrypted email
by couchand on Thursday April 16, 2020 @10:05PM
(#22895557)
But they shouldn't have to have heard of ACME to use it. If they're hosting your software on a publicly-accessible server, the UX should be roughly:
- user checks box that says they want certs issued automatically.
- your software handles the rest.
Of course there are plenty of details for the engineers to work out, but the end user shouldn't need to know any of them.
Re:Now I understand why almost no one uses encrypted email
by recursive on Friday April 17, 2020 @12:30AM
(#22896207)
The ones that are self-hosting are more-or-less doing it specifically so that they can use non-publicly-accessible servers. So I guess that won't work.
I was thinking that you were imagining that they would need to set up some kind of internal ACME infrastructure or something. Now I see you were just imagining certbot. Maybe half the domains I've seen used aren't actually publicly resolvable. Once I saw one that was, but was actually owned by someone else.
Anyway, there is no easy way out.