…and with more frequency in the future. 90 day certs are going to make it happen all the more often.
I hope whoever thought of that gets a lot of angry emails every 90 days.
Make certs expire in 14 days and I bet this would never happen
Disagree. Making certs expire more frequently will actually make the problem less likely to happen.
Whomst among us hasn't made the old "accidentally let the SSL cert expire" mistake?
Caddy and the auto-issuing certs is the next step, but that is prone to failure, too, of a different kind.
Automated certificate issuing is a problem by itself. "The authority that issued my cert isn't the authority that I thought it was but it looks the same and works, so carry on" kind of thing.