6 ms·

This is a very nice recognition! I realized that the registrar I have my personal site with purposefully does not support Let's Encrypt as a CA. Anyone have a r

This is a very nice recognition! I realized that the registrar I have my personal site with purposefully does not support Let's Encrypt as a CA. Anyone have a registrar they'd recommend these days to transfer a domain to? FYI, the crappy registrar/host in question is namecheap.com so you can avoid them in the future.

bombcar 4y ago
The registrar doesn't really have much to say about which CA you use, but a hosting provider would. Given that all certs are limited to a year, we're only a few steps away from the Let's Encrypt setup being automated everywhere.
- asimops 4y ago
  Just imagine: - Not allowed to change authoritative DNS - CAA set to everything except LE - cannot set CAA to LE Wouldn't it be nice?
  - duskwuff 4y ago
    > - Not allowed to change authoritative DNS Registrars are contractually required to allow registrants to change the nameservers associated with their domain.
    - bombcar 4y ago
      Some "free" or "low cost" "registrars" actually are hosting providers that register the domain for you, and then provide you limited access to the tools normally available.
      - duskwuff 4y ago
        Do these still exist? I remember running into one of them around 2005, but I haven't heard of any since -- it's been a long time since "give away hosting and run ads against the content" was a viable business model.
        bombcar 4y ago
        I’m sure there are some crippling around somewhere, but it’s no longer a major concern.
navanchauhan 4y ago
NameSilo [0] is reliable and has the cheapest pricing for .com and some other TLDs. You can also look into Cloudflare [1] I personally use NameSilo over Cloudflare because I don't want to give Cloudflare everything. [0] https://www.namesilo.com/domain/transfer-domains https://www.namesilo.com/domain/transfer-domains [1] https://www.cloudflare.com/en-gb/products/registrar/ https://www.cloudflare.com/en-gb/products/registrar/ https://developers.cloudflare.com/registrar/get-started/transfer-domain-to-cloudflare/ https://developers.cloudflare.com/registrar/get-started/tran...
drop_the_mike 4y ago
Is this a new development with namecheap? I currently have a domain with them that is set up with let's encrypt. I haven't touched my site in a long time now but visiting it now shows https.
- Rafuino 4y ago
  Apparently not, but I only just noticed after their free 1 year trial of SSL certs expired. They're listed on the Let's Encrypt site as having no plans to support and the source is pretty hilarious: https://community.letsencrypt.org/t/web-hosting-who-support-lets-encrypt/6920 https://community.letsencrypt.org/t/web-hosting-who-support-... Yes, you can set it up manually, but you have to do it every 90 days as opposed to having it automatically updated in a supported hoster.
NavinF 4y ago
The domain registrar is unrelated to LE and can’t block LE. Just install caddy on a $5/mo VPS instead of using your domain registrar as a host. It will automatically renew LE certs. Your current setup is almost always a terrible idea.
- Avamander 4y ago
  You usually get more out of shared hosting for $5/mo. And you don't have to manage it.
blep_ 4y ago
If you don't feel like switching over this, I do this with dnsrobocert, with Namecheap's default DNS servers: https://github.com/adferrand/dnsrobocert https://github.com/adferrand/dnsrobocert
- Rafuino 4y ago
  Thanks for the resource!

bombcar 4y ago

The registrar doesn't really have much to say about which CA you use, but a hosting provider would. Given that all certs are limited to a year, we're only a few steps away from the Let's Encrypt setup being automated everywhere.

asimops 4y ago
Just imagine: - Not allowed to change authoritative DNS - CAA set to everything except LE - cannot set CAA to LE Wouldn't it be nice?
- duskwuff 4y ago
  > - Not allowed to change authoritative DNS Registrars are contractually required to allow registrants to change the nameservers associated with their domain.
  - bombcar 4y ago
    Some "free" or "low cost" "registrars" actually are hosting providers that register the domain for you, and then provide you limited access to the tools normally available.
    - duskwuff 4y ago
      Do these still exist? I remember running into one of them around 2005, but I haven't heard of any since -- it's been a long time since "give away hosting and run ads against the content" was a viable business model.
      - bombcar 4y ago
        I’m sure there are some crippling around somewhere, but it’s no longer a major concern.

navanchauhan 4y ago

NameSilo [0] is reliable and has the cheapest pricing for .com and some other TLDs. You can also look into Cloudflare [1] I personally use NameSilo over Cloudflare because I don't want to give Cloudflare everything. [0] https://www.namesilo.com/domain/transfer-domains https://www.namesilo.com/domain/transfer-domains [1] https://www.cloudflare.com/en-gb/products/registrar/ https://www.cloudflare.com/en-gb/products/registrar/ https://developers.cloudflare.com/registrar/get-started/transfer-domain-to-cloudflare/ https://developers.cloudflare.com/registrar/get-started/tran...

drop_the_mike 4y ago

Is this a new development with namecheap? I currently have a domain with them that is set up with let's encrypt. I haven't touched my site in a long time now but visiting it now shows https.

Rafuino 4y ago
Apparently not, but I only just noticed after their free 1 year trial of SSL certs expired. They're listed on the Let's Encrypt site as having no plans to support and the source is pretty hilarious: https://community.letsencrypt.org/t/web-hosting-who-support-lets-encrypt/6920 https://community.letsencrypt.org/t/web-hosting-who-support-... Yes, you can set it up manually, but you have to do it every 90 days as opposed to having it automatically updated in a supported hoster.

NavinF 4y ago

The domain registrar is unrelated to LE and can’t block LE. Just install caddy on a $5/mo VPS instead of using your domain registrar as a host. It will automatically renew LE certs. Your current setup is almost always a terrible idea.

Avamander 4y ago
You usually get more out of shared hosting for $5/mo. And you don't have to manage it.

blep_ 4y ago

If you don't feel like switching over this, I do this with dnsrobocert, with Namecheap's default DNS servers: https://github.com/adferrand/dnsrobocert https://github.com/adferrand/dnsrobocert

Rafuino 4y ago
Thanks for the resource!