5 ms·

Why are you looking for another provider? Just use Lets Encrypt ;-)

by nik736 10y ago

jakobegger 10y ago
Lets encrypt certs are only valid for 3 months. In many situations the auto-renewal stuff is inconvenient. Then its easier to just buy a commercial cert that's valid for a few years.
- _jomo 10y ago
  I always use acme-tiny [0] to set up LE certs. You can follow their README to set up everything, including automatic reneweal cronjob in a couple minutes. 0: https://github.com/diafygi/acme-tiny#readme https://github.com/diafygi/acme-tiny#readme
  - bradleyjg 10y ago
    That's not always an option. For example, when I was looking into it for google app engine, I came across these directions: http://blog.seafuj.com/lets-encrypt-on-google-app-engine http://blog.seafuj.com/lets-encrypt-on-google-app-engine and http://igorartamonov.com/2015/12/lets-encrypt-ssl-google-appengine/ http://igorartamonov.com/2015/12/lets-encrypt-ssl-google-app... That's not so bad if you have to do it once a year or better yet once every two years, but I'm not doing that every 3 months. There's an issue open to allow for the process to be automated, hopefully by the next time I need to renew it'll be available. But as it stands today I went with a paid certificate.
    - bouk 10y ago
      I know this doesn't help you, but the best fix for this would be for App Engine to implement letsencrypt support directly, so they can automatically provision and renew certificates for anyone that uses app engine
      - Ajedi32 10y ago
        Here's the issue for that, FYI: https://code.google.com/p/googleappengine/issues/detail?id=12535 https://code.google.com/p/googleappengine/issues/detail?id=1...
    - newman314 10y ago
      +1 I was just looking at doing this last night for two sites and came to the conclusion that it was too painful. Far too many products still require manual intervention which is a huge bummer. Synology, VMware, ddwrt etc. OTOH, lego with Cloudflare DNS challenge proved to be very easy to use with a single command.
- distances 10y ago
  The Comodo cert was for 5 years at a total of $25 IIRC. I didn't consider that bad at all, especially as that was add-and-forget. Of course that's still like a money printing machine, and wildcards and greenbars are much more. But the deal was pretty fine for my personal domain. To be frank, I would probably have renewed with them.
- davidgerard 10y ago
  The whole idea is to motivate you to automate the process as far as possible. This is basically a good idea. It's a faff for us at present 'cos we don't have direct access to our load balancers at this moment (just switched hosting), but we're working on that.
- deleted 10y ago
  [deleted]
distances 10y ago
That counts as a provider too, and a likely one at that.
vec 10y ago
Let's Encrypt doesn't offer EV certs. Which is reasonable; EV certs can't be automated (and they're a dumb idea anyway), but they're still necessary for some of my sites.
- nailer 10y ago
  > EV certs can't be automated No entirely, but mostly: seeing as this is my job, I should have some idea. Currently writing a post about how we've used some psych techniques to automate the non-automatable parts which I'll post on HN. > (and they're a dumb idea anyway) EV matches identity to public keys. Nothing more, nothing less. If you need EV, we (https://certsimple.com https://certsimple.com) specialise in making those background checks far less painless with a bunch of unique tech. This means you get your certificate faster and with a lot less effort on your behalf (and a lot more on ours) during the verification process: https://certsimple.com/about https://certsimple.com/about If a DV cert is fine, go with Let's Encrypt (Hi Richard!), dnsimple (Hi Anthony!) or CloudFlare (Hi John and Filippo!) or Heroku.
  - Mtinie 10y ago
    Anecdotally: I fully recommend CertSimple. We used them for an EV cert we needed and not only was it simple to set up the request, but the processing was quick, too!
    - nailer 10y ago
      Thanks Ben :^)
  - jakobegger 10y ago
    I can't find pricing on your website. There's a page called 'pricing' that says I can find pricing on the home page. When I click the link, I find a lot of marketing text, but no pricing.
    - nailer 10y ago
      It's right underneath the 'Domain names' box, in to USD / GBP / EUR based on country (which is in turn based on your IP location).

Why are you looking for another provider? Just use Lets Encrypt ;-)

by nik736 10y ago

Why are you looking for another provider? Just use Lets Encrypt ;-)

Lets encrypt certs are only valid for 3 months. In many situations the auto-renewal stuff is inconvenient. Then its easier to just buy a commercial cert that's valid for a few years.

_jomo 10y ago
I always use acme-tiny [0] to set up LE certs. You can follow their README to set up everything, including automatic reneweal cronjob in a couple minutes. 0: https://github.com/diafygi/acme-tiny#readme https://github.com/diafygi/acme-tiny#readme
- bradleyjg 10y ago
  That's not always an option. For example, when I was looking into it for google app engine, I came across these directions: http://blog.seafuj.com/lets-encrypt-on-google-app-engine http://blog.seafuj.com/lets-encrypt-on-google-app-engine and http://igorartamonov.com/2015/12/lets-encrypt-ssl-google-appengine/ http://igorartamonov.com/2015/12/lets-encrypt-ssl-google-app... That's not so bad if you have to do it once a year or better yet once every two years, but I'm not doing that every 3 months. There's an issue open to allow for the process to be automated, hopefully by the next time I need to renew it'll be available. But as it stands today I went with a paid certificate.
  - bouk 10y ago
    I know this doesn't help you, but the best fix for this would be for App Engine to implement letsencrypt support directly, so they can automatically provision and renew certificates for anyone that uses app engine
    - Ajedi32 10y ago
      Here's the issue for that, FYI: https://code.google.com/p/googleappengine/issues/detail?id=12535 https://code.google.com/p/googleappengine/issues/detail?id=1...
  - newman314 10y ago
    +1 I was just looking at doing this last night for two sites and came to the conclusion that it was too painful. Far too many products still require manual intervention which is a huge bummer. Synology, VMware, ddwrt etc. OTOH, lego with Cloudflare DNS challenge proved to be very easy to use with a single command.
distances 10y ago
The Comodo cert was for 5 years at a total of $25 IIRC. I didn't consider that bad at all, especially as that was add-and-forget. Of course that's still like a money printing machine, and wildcards and greenbars are much more. But the deal was pretty fine for my personal domain. To be frank, I would probably have renewed with them.
davidgerard 10y ago
The whole idea is to motivate you to automate the process as far as possible. This is basically a good idea. It's a faff for us at present 'cos we don't have direct access to our load balancers at this moment (just switched hosting), but we're working on that.
deleted 10y ago
[deleted]

distances 10y ago

That counts as a provider too, and a likely one at that.

vec 10y ago

Let's Encrypt doesn't offer EV certs. Which is reasonable; EV certs can't be automated (and they're a dumb idea anyway), but they're still necessary for some of my sites.

nailer 10y ago
> EV certs can't be automated No entirely, but mostly: seeing as this is my job, I should have some idea. Currently writing a post about how we've used some psych techniques to automate the non-automatable parts which I'll post on HN. > (and they're a dumb idea anyway) EV matches identity to public keys. Nothing more, nothing less. If you need EV, we (https://certsimple.com https://certsimple.com) specialise in making those background checks far less painless with a bunch of unique tech. This means you get your certificate faster and with a lot less effort on your behalf (and a lot more on ours) during the verification process: https://certsimple.com/about https://certsimple.com/about If a DV cert is fine, go with Let's Encrypt (Hi Richard!), dnsimple (Hi Anthony!) or CloudFlare (Hi John and Filippo!) or Heroku.
- Mtinie 10y ago
  Anecdotally: I fully recommend CertSimple. We used them for an EV cert we needed and not only was it simple to set up the request, but the processing was quick, too!
  - nailer 10y ago
    Thanks Ben :^)
- jakobegger 10y ago
  I can't find pricing on your website. There's a page called 'pricing' that says I can find pricing on the home page. When I click the link, I find a lot of marketing text, but no pricing.
  - nailer 10y ago
    It's right underneath the 'Domain names' box, in to USD / GBP / EUR based on country (which is in turn based on your IP location).