3 ms·
You seem to be confusing pinning with hsts. If there's a crisis that means you can no longer use LE, you can just buy a valid cert from another provider andliv
by keikobadthebad 3y ago
You seem to be confusing pinning with hsts.
If there's a crisis that means you can no longer use LE, you can just buy a valid cert from another provider andlive up to what you were telling on hsts that way.
- cpach 3y agoIndeed. HSTS doesn’t care about the cert, as long as it’s valid.
- sschueller 3y agoThe issue I have is that it isn't just one cert. It's hundreds, manually purchasing those would be a huge untertaking.
- cpach 3y agoIn what way would HSTS be related to the lifecycle of a certificate?
- sschueller 3y agoIf for example I am no longer able to generate new certificates (too many at a time, some sort of sanctions not permitting it or LE is down for 3 months etc. etc.). HSTS requires that I am able to get a certificate, even thought very unlikely that I would not be able too there is that possibility.
- warrenm 3y agoHow are your worries over LE being down for 3 months any different from another provider being down when you try to renew? LE's setup for automation - if you've got your renewals schedule properly, you should "never" miss a renewal (you can renew several days (I forget how many) before expiration)