Scaling the Let's Encrypt rate limits to prepare for a billion active TLS cert

Posted by fanf2 on Monday May 26, 2025 @04:42AM
from the letsencrypt.org dept.

https://letsencrypt.org/2025/01/30/scaling-rate-limits/

( 2 comments | 5 points | on HN )

Re:Scaling the Let's Encrypt rate limits to prepare for a bi... by altairprime on Monday May 26, 2025 @12:46PM (#44099085)

> Conveniently, the difference between the TAT and the current time can then be returned to the subscriber in a Retry-After header, informing their client exactly how long to wait before trying again.

I hope they know to add in a small amount of anti-synchronization randomness to the exactly-calculated “retry-after” delay.

[ Parent | on HN ]

Re:Scaling the Let's Encrypt rate limits to prepare for a bi... by DivineEntropy on Wednesday June 04, 2025 @04:12PM (#44184973)

Just before it's returned to the caller: https://github.com/letsencrypt/boulder/blob/0d7ea60b2cb6fa35...

[ Parent | on HN ]