News for hackers. Stuff that matters.

A comment on The future of Nginx: Getting back to our open source roots. Parent comment

Re:The future of Nginx: Getting back to our open source roots by 1letterunixname on Wednesday August 24, 2022 @02:12AM (#32575509)
Chef + reliable CAs other than Let's Encrypt that have an API = the end.

Invest in:

0. Automation

1. Documentation

2. Take away SSH

3. Except for data stores, ephemeralize servers so they can be blown away and automatically reprovisioned

4. Have tested backups (untested aren't backups)

5. Save time

6. Solve other, bigger problems

[ Parent | on HN ]
Re:The future of Nginx: Getting back to our open source roots by vladvasiliu on Wednesday August 24, 2022 @03:47AM (#32576073)
> reliable CAs other than Let's Encrypt that have an API

Would you care to give an example or two?

[ Parent | on HN ]
Re:The future of Nginx: Getting back to our open source roots by TonyTrapp on Wednesday August 24, 2022 @04:45AM (#32576581)
Let's Encrypt's ACME protocol has been adopted by ZeroSSL, Buypass and ssl.com to offer free 90-day certificates.
[ Parent | on HN ]
Re:The future of Nginx: Getting back to our open source roots by 1letterunixname on Thursday September 01, 2022 @01:34AM (#32672392)
Free CAs are prone to fraud and abuse because they have no innate funding model and there's no barrier to anyone issuing a cert to any particular domain while attempting to circumvent domain authentication.
[ Parent | on HN ]
Re:The future of Nginx: Getting back to our open source roots by TonyTrapp on Sunday September 04, 2022 @06:24PM (#32718315)
> there's no barrier to anyone issuing a cert to any particular domain while attempting to circumvent domain authentication.

Let's Encrypt has a much better track record at preventing people from issuing certs for random domains compared to many other commercial entities.

[ Parent | on HN ]