5 ms·
> anything you expose to the public internet needs maintenance and security upgrades. Uh, no — in the past you could have purchased a hosting solution, that do
by yc12340 6y ago
> anything you expose to the public internet needs maintenance and security upgrades.
Uh, no — in the past you could have purchased a hosting solution, that does it's own TCP termination (such as shared hosting) to completely forget about your site. Many static websites still exist solely because of that.
Now you can accomplish the same thing by paying Cloudflare (or some other party) to terminate your TLS connection. One more kind of parasites has been enshrined in technological stack.
- enlyth 6y agoYou don't have to pay Cloudflare anything, they will do it for free
- pmlnr 6y agoAnd with that, lock you in their ecosystem of proprietary web behind captchas.
- Sebb767 6y agoYou can also pay Hetzner, Wordpress, 1&1, AWS or any other hosting provider, most of which also offer automatic certificate renewal by now. I don't see how there is any change, especially since hosting has gotten a lot cheaper.
- crazypython 6y agoDo they offer automated certificate renewal for services with constantly changing IPs? I don't think so.
- Sebb767 6y agoWell, you surely could do this via some proxy setup. But in that case you could also simply rely on LetsEncrypt directly; them going away is as likely as your average hosting provider. Now, of course that's an item on the maintenance list if you're hosting the web page yourself, but as mentioned above: You still need regular updates, having certificate renewal on that list doesn't make any noticeable difference.
- detaro 6y agoAnd nowadays you purchase a shared hosting account and they handle HTTPS for you, without you doing anything. What's the difference?
- Hackbraten 6y agoThat hosting solution of the past never needed any internal security upgrades or maintenance?