News for hackers. Stuff that matters.
Re:Let’s Encrypt Receives the Levchin Prize for Real-World C... by Rafuino on Monday May 16, 2022 @05:55PM (#31403614)
This is a very nice recognition! I realized that the registrar I have my personal site with purposefully does not support Let's Encrypt as a CA. Anyone have a registrar they'd recommend these days to transfer a domain to? FYI, the crappy registrar/host in question is namecheap.com so you can avoid them in the future.
Re:Let’s Encrypt Receives the Levchin Prize for Real-World C... by bombcar on Monday May 16, 2022 @05:58PM (#31403640)
The registrar doesn't really have much to say about which CA you use, but a hosting provider would.

Given that all certs are limited to a year, we're only a few steps away from the Let's Encrypt setup being automated everywhere.

Re:Let’s Encrypt Receives the Levchin Prize for Real-World C... by asimops on Monday May 16, 2022 @06:30PM (#31403889)
Just imagine:

- Not allowed to change authoritative DNS

- CAA set to everything except LE

- cannot set CAA to LE

Wouldn't it be nice?

Re:Let’s Encrypt Receives the Levchin Prize for Real-World C... by duskwuff on Monday May 16, 2022 @10:34PM (#31405451)
> - Not allowed to change authoritative DNS

Registrars are contractually required to allow registrants to change the nameservers associated with their domain.

Re:Let’s Encrypt Receives the Levchin Prize for Real-World C... by bombcar on Tuesday May 17, 2022 @10:09AM (#31410908)
Some "free" or "low cost" "registrars" actually are hosting providers that register the domain for you, and then provide you limited access to the tools normally available.
Re:Let’s Encrypt Receives the Levchin Prize for Real-World C... by duskwuff on Tuesday May 17, 2022 @02:10PM (#31414401)
Do these still exist? I remember running into one of them around 2005, but I haven't heard of any since -- it's been a long time since "give away hosting and run ads against the content" was a viable business model.
Re:Let’s Encrypt Receives the Levchin Prize for Real-World C... by bombcar on Tuesday May 17, 2022 @09:08PM (#31418142)
I’m sure there are some crippling around somewhere, but it’s no longer a major concern.
Re:Let’s Encrypt Receives the Levchin Prize for Real-World C... by navanchauhan on Monday May 16, 2022 @06:03PM (#31403681)
NameSilo [0] is reliable and has the cheapest pricing for .com and some other TLDs. You can also look into Cloudflare [1]

I personally use NameSilo over Cloudflare because I don't want to give Cloudflare everything.

[0] https://www.namesilo.com/domain/transfer-domains

[1] https://www.cloudflare.com/en-gb/products/registrar/

https://developers.cloudflare.com/registrar/get-started/tran...

Re:Let’s Encrypt Receives the Levchin Prize for Real-World C... by blep_ on Monday May 16, 2022 @06:43PM (#31403982)
If you don't feel like switching over this, I do this with dnsrobocert, with Namecheap's default DNS servers: https://github.com/adferrand/dnsrobocert
Re:Let’s Encrypt Receives the Levchin Prize for Real-World C... by Rafuino on Monday May 16, 2022 @07:06PM (#31404117)
Thanks for the resource!
Re:Let’s Encrypt Receives the Levchin Prize for Real-World C... by drop_the_mike on Monday May 16, 2022 @06:18PM (#31403803)
Is this a new development with namecheap? I currently have a domain with them that is set up with let's encrypt. I haven't touched my site in a long time now but visiting it now shows https.
Re:Let’s Encrypt Receives the Levchin Prize for Real-World C... by Rafuino on Monday May 16, 2022 @06:22PM (#31403829)
Apparently not, but I only just noticed after their free 1 year trial of SSL certs expired. They're listed on the Let's Encrypt site as having no plans to support and the source is pretty hilarious:

https://community.letsencrypt.org/t/web-hosting-who-support-...

Yes, you can set it up manually, but you have to do it every 90 days as opposed to having it automatically updated in a supported hoster.

Re:Let’s Encrypt Receives the Levchin Prize for Real-World C... by NavinF on Monday May 16, 2022 @06:31PM (#31403904)
The domain registrar is unrelated to LE and can’t block LE.

Just install caddy on a $5/mo VPS instead of using your domain registrar as a host. It will automatically renew LE certs. Your current setup is almost always a terrible idea.

Re:Let’s Encrypt Receives the Levchin Prize for Real-World C... by Avamander on Monday May 16, 2022 @06:51PM (#31404038)
You usually get more out of shared hosting for $5/mo. And you don't have to manage it.