3 ms·

Pramp is particularly interesting, though I'm not sure if there are ways for the Pramp team to maintain good levels of quality as the user base grows. When com

Pramp is particularly interesting, though I'm not sure if there are ways for the Pramp team to maintain good levels of quality as the user base grows. When compared to YC companies, the YCF companies seem a little earlier stage by demo day. Nit picking: A lot of the websites of YCF companies use RapidSSL, Comodo or GoDaddy domain validated certificates. Why not Let's Encrypt?

eranation 11y ago
I know Refael, one of the founders, he is an amazing guy, and Pramp is pretty awesome, wish them luck!
Alex3917 11y ago
> Why not Let's Encrypt? Because if you're really running a business then any decision other than just paying the $200 to not have to think about certs more than one day every three years is probably not justifiable.
- koolba 11y ago
  > Because if you're really running a business then any decision other than just paying the $200 to not have to think about certs more than one day every three years is probably not justifiable. From the same data I came to the reverse conclusion, having auto-renewing certs from LetsEncrypt is awesome. Combined with bog standard cron jobs you now don't have to worry about any manual intervention down the road. Compare that with creating a new key, creating a CSR, comparing SSL cert prices, getting aggravated at paying $10/year for 1ms of compute time (to sign the cert), grumbling to yourself, buying the cert, waiting for email confirmation, confirming domain ownership via insecure SMTP email, waiting for the cert to be issued, downloading a zip of the cert that somehow isn't the same name/format as your notes from last time, unzipping the zip file, figuring out the order for the cert chain, uploading it via SCP to your server, copying it over the old cert yet also accidentally keeping a copy of the cert/key in the default ubuntu@myhost home directory with 644 permissions, and finally testing it from your browser (only to find that you didn't send a SIGHUP to nginx so it's still providing the old cert). So yes, having to think about certs more than one day (the day I set it up) is not justifiable. PS: Why the hell are you paying $200 anyway? At most it should be $30, i.e. $10/year x 3 years. That looks more in line with wildcard SSL prices.
  - Alex3917 11y ago
    > That looks more in line with wildcard SSL prices. Because I'm buying a wildcard cert. (Which Let's Encrypt doesn't currently offer.)

eranation 11y ago

I know Refael, one of the founders, he is an amazing guy, and Pramp is pretty awesome, wish them luck!

Alex3917 11y ago

> Why not Let's Encrypt? Because if you're really running a business then any decision other than just paying the $200 to not have to think about certs more than one day every three years is probably not justifiable.

koolba 11y ago
> Because if you're really running a business then any decision other than just paying the $200 to not have to think about certs more than one day every three years is probably not justifiable. From the same data I came to the reverse conclusion, having auto-renewing certs from LetsEncrypt is awesome. Combined with bog standard cron jobs you now don't have to worry about any manual intervention down the road. Compare that with creating a new key, creating a CSR, comparing SSL cert prices, getting aggravated at paying $10/year for 1ms of compute time (to sign the cert), grumbling to yourself, buying the cert, waiting for email confirmation, confirming domain ownership via insecure SMTP email, waiting for the cert to be issued, downloading a zip of the cert that somehow isn't the same name/format as your notes from last time, unzipping the zip file, figuring out the order for the cert chain, uploading it via SCP to your server, copying it over the old cert yet also accidentally keeping a copy of the cert/key in the default ubuntu@myhost home directory with 644 permissions, and finally testing it from your browser (only to find that you didn't send a SIGHUP to nginx so it's still providing the old cert). So yes, having to think about certs more than one day (the day I set it up) is not justifiable. PS: Why the hell are you paying $200 anyway? At most it should be $30, i.e. $10/year x 3 years. That looks more in line with wildcard SSL prices.
- Alex3917 11y ago
  > That looks more in line with wildcard SSL prices. Because I'm buying a wildcard cert. (Which Let's Encrypt doesn't currently offer.)