Re:Krebsonsecurity.com has an expired SSL certificate
by mpd on Tuesday November 17, 2020 @09:04PM
(#25132349)
While you're not paying for the cert, there is certainly still a cost involved.
[ Parent
| on HN ]
Re:Krebsonsecurity.com has an expired SSL certificate
by corytheboyd on Tuesday November 17, 2020 @09:12PM
(#25132399)
What is it? Genuinely curious, as I am using and relying on LetsEncrypt
Re:Krebsonsecurity.com has an expired SSL certificate
by mpd on Tuesday November 17, 2020 @09:23PM
(#25132481)
The cost to build and maintain the infrastructure to handle renewal and tests to verify such.
Re:Krebsonsecurity.com has an expired SSL certificate
by nkozyra on Tuesday November 17, 2020 @09:11PM
(#25132391)
I would say the technical hurdle is about equal to comodo. What other cost is there?
Re:Krebsonsecurity.com has an expired SSL certificate
by mpd on Tuesday November 17, 2020 @09:25PM
(#25132492)
Comodo is a renewal and updating an artifact (i.e. the actual cert), then you're done, vs. having to handle LE's API to deal with doing it 'automatically' and then carrying that forward. My point is simply that the cost is not zero.
Re:Krebsonsecurity.com has an expired SSL certificate
by lights0123 on Tuesday November 17, 2020 @09:37PM
(#25132582)
You can still just replace the cert manually like you would any other CA. It's just there's no official GUI to do it with LE and you have to do it more often.
Re:Krebsonsecurity.com has an expired SSL certificate
by jasonpeacock on Wednesday November 18, 2020 @10:16AM
(#25137639)
There's already mature, widely adopted tools like certbot and acme.sh that do this automatically for you.
It may not be zero, but it's no more than Comodo.