10 ms·
It's amazing that it takes a free provider to make things simple: https://letsencrypt.org/howitworks/ https://letsencrypt.org/howitworks/ I'd actually pay mor
by jonknee 11y ago
It's amazing that it takes a free provider to make things simple:
https://letsencrypt.org/howitworks/ https://letsencrypt.org/howitworks/
I'd actually pay more than I do now for SSL certs to get that kind of simplicity.
- icebraining 11y agoSSLMate seems pretty easy as well: https://sslmate.com/ https://sslmate.com/ (No affiliation, I just saw their HN post some time before)
- nailer 11y agoI run https://certsimple.com https://certsimple.com: we only do EV certificates, we're the fastest place to get an EV cert, we check as much as we can before you pay us a cent, and our application process is 80 seconds.
- kolev 11y agoThese shameless plugs are getting really annoying. We know about you, we know CloudFlare and Let's Encrypt are kinda competitors with their free certificates, but you don't have to comment on each post about them. Really, stop annoying us - it doesn't do you any good, honestly!
- schoen 11y agoIn this case, the previous commenter was explicitly asking for advice about how to get certificates more conveniently today, so the replies about existing services that can do so seem quite relevant.
- kolev 11y agoOh, the commenter asked for the overly expensive EV type? Let's not be the devil's advocate. This is the wrong way to advertise. This is not the beginners corner. You advertise once, twice, three times, people remember, you can search HN - no need to annoy people till the end of the world. The company seems desperate for new business this way anyway.
- kolev 11y agoIt's like trying to sell a Ferrari to a guy who's looking for a regular car...
- twothamendment 11y agoMaybe so, but you know every regular guy driving a regular car would rather have a Ferrari and might even spend time looking at them even though he can't buy one.
- kolev 11y agoYou're wrong. EV is a scam. I can afford to buy EV for most of my sites, but I don't do it. Because consumers don't really care. Even HN doesn't have an EV! Ferrari is what everybody wants, EV is a different story! And stop downvoting all my comments - it shows your subpar human material. Downvote my main point and stop right there. No need to go aggressive and try to silence me and not comment further, because you will "punish" me further as well.
- cpach 11y agoAs per the guidelines, please keep discussions civil on HN and please don't complain about being downvoted. https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html
- kolev 11y agoI am civil, but those who can't help the sick urge to downvote every single comment of mine although they all represent the same points are not civilized.
- dang 11y agoNo, cpach is right. You can't post comments like "it shows your subpar human material" to Hacker News. Personal attacks are not allowed here, regardless of whether someone downvoted unfairly. There's also the guideline specifically asking you not to go on about being downvoted. https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html
- mindcrime 11y agoThese shameless plugs are getting really annoying. We know about you I for one had never heard of these guys and appreciate the mention. Besides, as far as I can recall, it's never been considered problematic to promote your own service on HN as long as the mention is topical and done tastefully.
- readme 11y agoWho's us? I didn't know you represented me. I actually had never heard of this and think it's pretty cool.
- kolev 11y agoGrab a dictionary - there's "us", and there's "all".
- kuschku 11y agoYou might want to fix your webdesign: http://i.imgur.com/zQbWnUI.png http://i.imgur.com/zQbWnUI.png And this is in Firefox, which renders fonts more bold than other browsers.
- JorgeGT 11y agoIn Chrome is better but still terrible :/
- nhebb 11y agoJust removing the font-weight: 300 helps tremendously. Personally, I'm becoming less of a fan of external fonts. I've noticed lately that they're often the slowest thing to load on sites that use them (especially Google fonts).
- LeoNatan25 11y agoThe weight works great on a high DPI display, but on older displays, it just doesn't work. Open on a rMBP or iPad, and it's beautiful. I'm guessing the designers are working on a high DPI Mac.
- hinkley 11y agoI am on a rMBP and I wouldn't call it beautiful. It's painfully thin, and the eyestrain factor is pretty high.
- nailer 11y agoEdit: should be sorted. Original: working on a standard DPI Mac, but it still looks fine - see http://imgur.com/WRWYzBx http://imgur.com/WRWYzBx. Trying to figure it out now...
- LeoNatan25 11y agoI'm guessing OS X's font smoothing is more aggressive and makes it look better than Windows'. It also depends on how the font was hinted for Windows, whereas on OS X, the system "knows best" and has its own font smoothing technique.
- Killswitch 11y agoYeah but still $234/yr for a certificate. While I appreciate what you're doing to make things more simple, that's pretty expensive. I can't wait until letsencrypt is done.
- jessedhillon 11y agoThey offer EV certs, so there's some cost involved in doing the identity verification. I don't think it's $234 dollars a year, forever, but it costs something. And that's actually a pretty competitive price for an EV certificate.
- pserwylo 11y agoWhile I also look forward to letsencrypt being generally available, the fact your parent comment charges $234/yr for a cert is in response to: > I'd actually pay more than I do now for SSL certs to get that kind of simplicity.
- StavrosK 11y ago$10/yr to $234/yr is quite the jump.
- leesalminen 11y agoIs it possible to get a wildcard EV certificate?
- Gregordinary 11y agoWildcards are prohibited on EV certificates per CA/B Forum requirements: https://cabforum.org/wp-content/uploads/EV-V1_5_61.pdf https://cabforum.org/wp-content/uploads/EV-V1_5_61.pdf (Section 9.2.2)
- EwanToo 11y agoNo, which is why most of Google isn't running on EV certs..
- manigandham 11y agoLike the other comment says, the font is way too thin on your site and actually hurts to read on my monitor. Any interest I had in this service is effectively gone now. Text needs to be legible, please try and stick to normal and bold weights.
- A010 11y agoI didn't know the site is unreadable until uMatrix was disabled.
- jsnk 11y agoLooks awesome! Does anyone know if there's an undo command for `$ letsencrypt run`? I would love to try this, but too scared to do it and mess up with my nginx configs.
- HappyTypist 11y agoPerhaps $ git init your nginx configs?
- nightpool 11y agoI mean... back them up? :D
- schoen 11y agoThe client has a checkpointing mechanism that does back up old configuration versions and can revert them. (This client feature is called the "reverter", in case you care to look at some of the code or issues related to it on our GitHub page.) I still haven't figured out how that interacts with the automated renewal features (probably not well right now!) but the ability to revert configurations exists. Also, please don't try the client with a live site right now, because we don't have general public availability (nobody outside of Let's Encrypt can get a cert issued from the Let's Encrypt intermediate -- you'll get one from "happy hacker fake CA" instead), and we don't have the cross-signature. We're not even quite at the beta-test stage yet, let alone the "please use our certificates on your popular public services" stage. :-) The main exception would be if you currently don't have HTTPS enabled at all and you're in the mood to experiment to learn more about Let's Encrypt.
- technion 11y agoFor this specific reason I'm a lot more comfortable running the "nosudo"[0] variant, which tells you to install the keys yourself. A recently released Ruby gem also looks promising, in that it's a much better codebase with a tonne of tests.[1]. [0] https://github.com/diafygi/letsencrypt-nosudo https://github.com/diafygi/letsencrypt-nosudo [1] https://github.com/unixcharles/acme-client https://github.com/unixcharles/acme-client
- nathan7 11y agoSSLmate (https://sslmate.com/ https://sslmate.com/) actually makes things similarly simple — I've been using them for a few months now.