3 ms·
Some of our customers have no trouble with certificates. The others have never heard of ACME.
by recursive 7y ago
Some of our customers have no trouble with certificates. The others have never heard of ACME.
- couchand 7y agoBut they shouldn't have to have heard of ACME to use it. If they're hosting your software on a publicly-accessible server, the UX should be roughly: - user checks box that says they want certs issued automatically. - your software handles the rest. Of course there are plenty of details for the engineers to work out, but the end user shouldn't need to know any of them.
- recursive 7y agoThe ones that are self-hosting are more-or-less doing it specifically so that they can use non-publicly-accessible servers. So I guess that won't work. I was thinking that you were imagining that they would need to set up some kind of internal ACME infrastructure or something. Now I see you were just imagining certbot. Maybe half the domains I've seen used aren't actually publicly resolvable. Once I saw one that was, but was actually owned by someone else. Anyway, there is no easy way out.