3 ms·
And in fact you can do this almost automatically the next time you upgrade your webserver to resolve security issues. It's about as easy as it can get, easier t
by dpkirchner 4y ago
And in fact you can do this almost automatically the next time you upgrade your webserver to resolve security issues. It's about as easy as it can get, easier than a lot of things people do every week (shopping, etc).
- superkuh 4y agoIf you think an acme using website is going to remain accessible when left unattended for a decade I have a bridge to sell you. acme 1 didn't even last a handful of years. And that's ignoring the dozens of ways every individual acme package can and do fail even before the protocol becomes obsoleted. Moving parts break. Even if the complexity is hidden from you it is still there. And lets not even get into root cert churn. Remember when LE's original root cert stopped working a couple years ago? HTTPS only, CA TLS only, leads to websites with lifetimes that max out around several years. This is fine for corporate/institutions as nothing of theirs lasts this long anyway. But it's a huge problem with personal sites which remain useful and valuable for longer time periods.
- dpkirchner 4y agoIt doesn't need to last a decade no more than does a web server. We have to upgrade software, it's just a fact of life. I don't really understand the objection on those grounds. It sounds like you just don't want to do it for other reasons.