It's ridiculously hard to get the Web UI on printers use proper Let's Encrypt certificates. You often can do it manually, but there is no provision for automati

It's ridiculously hard to get the Web UI on printers use proper Let's Encrypt certificates. You often can do it manually, but there is no provision for automation and doing it every 3 months get old. Not to mention the printers that won't accept 4096-bit certificates or old firmwares that don't do SHA-256. Then you have the wide variety of baroque protocols used by Windows. I don't do Windows and I'd like to reduce the attack surface, but if you disable them, often standard IPP/CUPS or lpd stops working for no reason. I'm surprised printers are not more commonly used by botnets, their security is abysmal and they usually stop getting firmware updates just a couple years after being discontinued, which is itself only a couple of years after being introduced.