News for hackers. Stuff that matters.

A comment on After 10 years, HTTPS is truly everywhere. Parent comment

Re:After 10 years, HTTPS is truly everywhere by watermelon0 on Wednesday December 29, 2021 @03:14AM (#29722938)
They claim [1] that they won't be making breaking changes to the protocol, unless absolutely necessary.

Many web servers/reverse proxies such as Caddy and Traefik have build-in ACME handling, so as long as you keep them up to date, your certificates should be correctly renewed. From my experience, configuration of ACME with either of them is a breeze.

I'm not sure why nginx and Apache don't implement this, considering they are the most popular servers.

[1] https://letsencrypt.org/docs/acme-protocol-updates/

[ Parent | on HN ]
Re:After 10 years, HTTPS is truly everywhere by greatgib on Wednesday December 29, 2021 @10:28AM (#29725665)
There is no legitimate reason why you would need to keep all your servers updated all the time just because you want to have your cert continuing working.

On my case, I was annoyed with an old vps for example because impossible to use docker or snap because you need kernels modules that you don't control in such a setup.

[ Parent | on HN ]