3 ms·
But what if it hasn't obtained a cert for the site before (e.g. first run)? What if the cert doesn't expire in a month -- but only, say, 7 days? 7 minutes? Whe
by mholt 10y ago
But what if it hasn't obtained a cert for the site before (e.g. first run)?
What if the cert doesn't expire in a month -- but only, say, 7 days? 7 minutes? Where do you draw the line? Would you rather have your site go red in browsers or just not have the server start? (Remember, it wasn't started already anyway so it's not like your sites are incurring new downtime.)
- deleted 10y ago[deleted]
- jessaustin 10y agoEh, the new run might be a failover, or part of an autoscaling setup, so maybe there could be some downtime? I think the default setting has to be to start anyway, although of course any particular service could be configured not to. Intentional failure seems kind of a blunt instrument?
- toomuchtodo 10y agoThanks for communicating my thoughts on this in this thread far better than I. Spot on.