3 ms·
Yes, the intent is to have short expiry times to encourage people to completely automate the process.
by imron 11y ago
Yes, the intent is to have short expiry times to encourage people to completely automate the process.
- tomjen3 11y agoUnfortunately that makes it more complicated too, which means fewer people will use it (a classic example of a trivial inconvinience http://lesswrong.com/lw/f1/beware_trivial_inconveniences/ http://lesswrong.com/lw/f1/beware_trivial_inconveniences/).
- nulltype 11y agoHonestly renewing certs is a huge pain and should be automated even in the 1 year case. I usually have forgotten after a year how I obtained and installed the cert last time. The Lets Encrypt flow with DNS is way less complicated than obtaining a cert through many commercial services, so it probably works out about even.