Hacker News new | ask | show | jobs
by iso1210 1926 days ago
Pointing out the issues of a single point of failure for the internet?
4 comments
francislavoie 1926 days ago
Caddy mitigates this by falling back to ZeroSSL if it couldn't issue a cert from LE: https://caddyserver.com/docs/automatic-https#errors
link
beermonster 1926 days ago
The keys to the kingdom are ever more being placed in the hands of relatively few internet custodians. Figuratively here of course, since the private keys are generated locally and never transmitted to LE.
link
Chilinot 1926 days ago
Is it really a single point of failure though? Certificates are renewed well in advance, and there are several free alternatives with ACME support to LetsEncrypt today.

Switching to a new provider in case LetsEncrypt goes down is as simple as updating your scripts.

link
iso1210 1926 days ago
A large number of sites use LE, and only LE.

Perhaps this move will mean people actually update their scripts and get it working on another system

link
gsich 1926 days ago
Why? If you only renew at the last day you will run into troubles independently of Lets Encrypt.
link
gsich 1926 days ago
Buypass, ZeroSSL also provide free certificates with ACME.
link