undefined | Better HN

0 pointsmijoharas7y ago0 comments

> Increases entry barrier, centralizing internet even more. For-profit internet companies have zero issues paying for certificates, it’s part of their business. It raises barrier for ordinary people. Also creates more incentive for placing ads on their web sites to reduce costs. Guess who earns most profits from internet ads?

Lets encrypt is one obvious thing to mention here, besides removing the cost barrier to entry it really is quite simple to set up.

0 comments

4 comments · 2 top-level

Const-me7y ago· 2 in thread

> it really is quite simple to set up

I haven’t tried but I think it’s only simple is you’re willing to manually renew every 90 days. I’m not willing to.

Automatic renewals are only simple for popular environments like LAMP, my web server runs Windows server with IIS and old school asp.net. I can run arbitrary native code on that server, but I don’t have GUI access to that machine.

But even if it would be super-easy and automated for 100% web servers, that’s still introducing a dependency to a third-party service, for no value for audience of my web site. Just shutting up a web browser that I don’t even use myself is not a good reason, IMO.

signalsmith7y ago

> [...] manually renew every 90 days

That's the opposite of the design goals - Let's Encrypt is designed to be automatable.

They set the expiry to 90 days precisely because they want you to automate the renewal.

collinmanderson7y ago

It's probably not as nice as linux, but there are a lot of options for Windows / IIS

https://letsencrypt.org/docs/client-options/#windows-iis

reidjs7y ago

It can actually be quite difficult to set up if you have a non standard configuration.

j / k navigate · click thread line to collapse