This, combined with your other responses to this thread, makes it very apparent that you’re more interested in asserting your ignorant view rather than actually learning anything. Please don’t bother commenting. TLS cert prices have crashed to…in most cases, $0, as average certificate validity times have shortened. If there’s any cost relationship at all, it’s the exact opposite of what you’re implying.

If re-signing adds material complexity to your architecture (including the ‘hidden complexity’ of a dev / ops person needing to remember to manually renew a cert every two years) then frankly it sounds like you’ve got larger problems on your hands.

Cynicism doesn’t make you smart.

I miss simplicity.

And I could argue that lower prices implies money is made somewhere else. Like how Cloudflare infested half the internet with their free MITM.

But, ye, I should chill a bit on topics like these. I have hard time not ending up in a 'Google etc. is coming for me' rant.

We've banned this account for repeatedly breaking the site guidelines. Please don't create accounts to break HN's rules with. If you don't want to be banned, you're welcome to email [email protected] and give us reason to believe that you'll follow the rules in the future. They're here: https://news.ycombinator.com/newsguidelines.html.

It's particularly bad to do this when you're knowledgeable and (let's assume) correct on a topic, because then the bad parts of your comment (such as personal attacks) end up discrediting the truth. That doesn't help anyone. https://hn.algolia.com/?dateRange=all&page=0&prefix=true&sor...

100 year certs require a consultant when the 100 years are up on any certificate and no one has any idea how the system was set up. They require a consultant when there's a security breach and you have to figure out which of the many certs you have ever used is compromised, or let the attackers in.

The hope is that 45 day certs don't require consultants because if you don't set it right you'll find it right away... and of course the risk of leak is much lesser.

It's very easy to use free certificates (e.g. LetsEncrypt) that can use a free script to automate the renewal of them. There's also plenty of free guides on how to use them for various web servers etc. That comes to a grand total of nothing.

If you'd rather pay someone else to do it for you, then that's your own issue and not really anything to do with the length of certificate validity.