4 ms·
That sounds like just one maybe-disruptive event that manifests itself differently if you keep working around it instead of dealing with it properly. If you nee
by Denvercoder9 6y ago
That sounds like just one maybe-disruptive event that manifests itself differently if you keep working around it instead of dealing with it properly. If you need to deal with it at all - I suspect most systems that still need to connect to the internet trust the ISRG root nowadays.
- EB66 6y ago> I suspect most systems that still need to connect to the internet trust the ISRG root nowadays. There are tons of systems that do not -- particularly in the enterprise. I manage web servers for a mission-critical healthcare-related SaaS. We occasionally encounter TLS issues even with Globalsign root certificates -- far more distributed than ISRG. We ended up switching to DigiCert last year and it helped reduce the number of TLS-related failures reported to us. We could never switch to Let's Encrypt / ISRG for that reason. Even if ISRG has 95% distribution of their root certificate, that's not good enough for mission-critical enterprise. I'm not at all surprised that Heroku had to roll back their TLS certificate back to DigiCert -- DigiCert is what you want if need compatibility with the highest number of clients.
- deleted 6y ago[deleted]