Hacker News Reader

Comment by Hamuko | Hacker News Reader

I don't really see the difference between it and other certification. Surely I need to configure my servers regardless.

Also, sometimes doing a bit of server work is rewarding on its own.

The main difference in my experience is that LE's short certificate expiry dates force you to automate certificate renewal, while traditional certificates usually don't even offer automation and so require you to take time to explicitly renew them.

My problem is with the crusade to make everything HTTPS - normal HTTP involved no ongoing setup, and didn't put the ongoing functionality of your website in someone else's hands. As I've said above, LetsEncrypt is sponsored by corporations and could disappear tomorrow.

Do you live in some parallel universe where we do not have mass surveillance, nation states or internet providers modifying traffic or unencrypted wifi at coffee shops?

Your attitude is irresponsible. HTTPS is not a luxury, it is a requirement.

Let's Encrypt is currently sponsored by 53 different corporations and organizations, including Google, Facebook and Cisco. I'm not seeing it disappearing anytime soon.

I'm pretty confident your services will disappear long before LetsEncrypt does.

My HTTPS web server requires no on-going setup. And the on-going functionality is in a lot of people's hands, since I don't host the server in my own house with my own fixed Internet connection.

Reply on news.ycombinator.com