35 ms·
Cumbersome? For most non-professionals running a small site, absolutely. That's where hosting providers need to step up to make it as easy as possible. Expensi
by the_duke 10y ago
Cumbersome? For most non-professionals running a small site, absolutely. That's where hosting providers need to step up to make it as easy as possible.
Expensive? How?
Thanks to Let's encrypt and others, certificates are now free.
- Jaruzel 10y agoFree is not the same as 'automatic' - until the process of obtaining a certificate and installing it on all the popular web hosting platforms is invisible to the site-owner then there will always be a barrier to implementation.
- technion 10y agocPanel, which runs most of the cheap web hosting platforms, now includes a Lets Encrypt plugin. In the coming update, it will be a plugin enabled by default.
- LunaSea 10y agoI'm sorry but I wouldn't call certificates with a lifetime of 90 days practical and I'm a developer. Let's Encrypt is still far from being convenient and usable for small companies or individuals that don't want to manage infrastructures and administration like writing a cron job that refreshes your certificate.
- clarry 10y agoYes that one liner takes so much effort to write [EDIT: copy from one of the bazillion articles that have already done it for you]. That's why we can't have security. It takes too much effort.
- Jaruzel 10y agoFor fun, next time you are on public transport, or sitting in an airport lounge, stand up and ask loudly 'Does anyone know what cron is?" The lack of raised hands, should answer for you why LetsEncrypt is not ready for mainstream use. Until Cert renewal is baked into all the hosting apps/platforms - HTTPs will never be ubiquitous.
- cm3 10y agouMatrix offers a feature to randomly pick a UA every 5 minutes from a set of known UAs. This works, although GMail might complain about the UA being too old. Reloading GMail resolves that. EDIT: Replied to the wrong parent, please ignore in this context.