Re:Another free CA as an alternative to Let's Encrypt
by mholt on Wednesday November 25, 2020 @12:36PM
(#25211828)
> even using the same libraries for most of the functionality
You're wrong. Caddy uses a superior library that's been more stress-tested at scale in production: https://github.com/caddyserver/certmagic and https://github.com/mholt/acmez - neither of which lego uses. Bugs and limitations in lego caused severe problems for several of our larger customers.
Re:Another free CA as an alternative to Let's Encrypt
by francislavoie on Wednesday November 25, 2020 @06:23AM
(#25208111)
> even using the same libraries for most of the functionality
Actually no, not anymore.
https://github.com/caddyserver/caddy/pull/3621
> because there’s demand for it, today
We've only seen the demand from you. Nobody else. One individual isn't enough demand.
That’s why I’m comparing it to traefik, which can also automate TLS management, in the exact same way (even using the same libraries for most of the functionality, they’re after all both go webservers).
> And the arguments for making any changes are not compelling enough to warrant the risks involved
Why is it that you think you know better than the maintainers of e.g. traefik? It’s not like this is legacy functionality they kept around just for the sake of it, they added it in 2019 because there’s demand for it, today.