4 ms·
I agree with you except for the HTTPS part. In some nations it's not unheard of for ISPs to inject ads and tracking into webpages. This also opens the door for
by foepys 6y ago
I agree with you except for the HTTPS part. In some nations it's not unheard of for ISPs to inject ads and tracking into webpages. This also opens the door for malware.
Let's Encrypt's with its certbot made it easy enough to get a cert and every major webserver supports HTTPS out of the box with good documentation.
- jeltz 6y agoThe certbot client is pretty awful (it does not cooperate well with automization) but otherwise I agree 100%. HTTPS everywhere and Letsencrypt have been huge boons to security.
- rjmunro 6y agoCan you expand "it does not cooperate well with automization", because that's not something I've ever heard before.
- jeltz 6y agoSome of its commands modify the config files so if you ever need to fix something manually you can very easily end up changing the config and breaking something. I use dehydrated instead.
- Omniusaspirer 6y agoCertbot seemed pretty easily automated to me as a guy who just set it up for the first time a few days ago on a new Arch install. The wiki is a pretty great resource if you're still having problems.
- happymellon 6y agoNot unheard of? Pretty sure Comcast at least used to do this. They are a pretty big player in a well know country that most people here would know of.