3 ms·
> Alternatively, maybe Let's Encrypt ought to Chaos Monkey this up and be down for 4 random hours every month or something on purpose. And then gain a reputati
by kogepathic 9y ago
> Alternatively, maybe Let's Encrypt ought to Chaos Monkey this up and be down for 4 random hours every month or something on purpose.
And then gain a reputation for being unreliable?
> Or if you want to make very sure you don't turn people away, be down for 4 hours every month for any cert that has been in Let's Encrypt for more than a month or two, so you don't turn away new users. Because if you have a problem with a brief outage, the problem is in the user code, not Let's Encrypt.
Most users don't care. If it's not working reliably for them, they'll just move to something that does. Maybe there is an issue in their code that should be addressed, but I seriously doubt they'd care to have that pointed out when they're suddenly offline.
Anyone doing proper testing of their software/infrastructure should have a testing environment anyway. I'd take your proposal and modify it to: Let's Encrypt should offer testing servers which are down for well defined periods throughout the day that people can use to test their platform against.
- jerf 9y ago"And then gain a reputation for being unreliable?" If they tell people what they are doing and why, and only do it for established certificates, I'm not sure that would happen. "Let's Encrypt should offer testing servers which are down for well defined periods throughout the day that people can use to test their platform against." Who would use them? Anyone who cares enough to simulate LE failure is presumably already doing it.