3 ms·

Let's encrypt doesn't really work for all hosting solutions. So a lot of sites still have to purchase an expensive cert.

ancarda 9y ago
Could you help me understand scenarios where Let's Encrypt and CloudFlare SSL won't suffice? They have, e.g. added wildcard support now, so that's another angle covered.
- staticelf 9y ago
  I have sites on Azure and I could add CloudFlare SSL, but it's some work to make that happen and I will have to do it now for all my static sites that absolutely do not need TLS (no forms, no cookies, no javascript). Or else I have to pay for a cert, a cert is still like $10-$20 per year, per site so that is a lot of money if you have a lot of static sites compared to what the site costs to host (which is near-to-nothing). And for other shared hosting solutions I'm not really sure if it's possible to implement CloudFlare SSL (I have never implemented it so I'm not really sure what's required)? Why I don't want Cloudflare is because that is adding a third party just because google said I must or I will get punished for it.
  - ancarda 9y ago
    Hopefully Azure will implement some solution to provide SSL for free. I suspect with this announcement, free SSL may get more attention on hosting providers. There's already several tickets open on the Azure feedback website: https://feedback.azure.com/forums/170024-additional-services/suggestions/16957756-add-integration-with-let-s-encrypt https://feedback.azure.com/forums/170024-additional-services... -- this problem may go away mostly by itself if it continues to get easier every year. Google isn't making you do anything, merely notifying users that the connection to your website is not secure.
    - staticelf 9y ago
      Yes it may, but it can still take a lot of time before it's one click. These tickets have existed since Let's Encrypt was released. Well they are indirect forcing me through their domination over the web, which I don't like.

ancarda 9y ago

Could you help me understand scenarios where Let's Encrypt and CloudFlare SSL won't suffice? They have, e.g. added wildcard support now, so that's another angle covered.

staticelf 9y ago
I have sites on Azure and I could add CloudFlare SSL, but it's some work to make that happen and I will have to do it now for all my static sites that absolutely do not need TLS (no forms, no cookies, no javascript). Or else I have to pay for a cert, a cert is still like $10-$20 per year, per site so that is a lot of money if you have a lot of static sites compared to what the site costs to host (which is near-to-nothing). And for other shared hosting solutions I'm not really sure if it's possible to implement CloudFlare SSL (I have never implemented it so I'm not really sure what's required)? Why I don't want Cloudflare is because that is adding a third party just because google said I must or I will get punished for it.
- ancarda 9y ago
  Hopefully Azure will implement some solution to provide SSL for free. I suspect with this announcement, free SSL may get more attention on hosting providers. There's already several tickets open on the Azure feedback website: https://feedback.azure.com/forums/170024-additional-services/suggestions/16957756-add-integration-with-let-s-encrypt https://feedback.azure.com/forums/170024-additional-services... -- this problem may go away mostly by itself if it continues to get easier every year. Google isn't making you do anything, merely notifying users that the connection to your website is not secure.
  - staticelf 9y ago
    Yes it may, but it can still take a lot of time before it's one click. These tickets have existed since Let's Encrypt was released. Well they are indirect forcing me through their domination over the web, which I don't like.