3 ms·

I think the problem that 100 year certs don't require a complicated SaaS and consultant riddled circus as much. It is like credit cards. The more problem the m

I think the problem that 100 year certs don't require a complicated SaaS and consultant riddled circus as much. It is like credit cards. The more problem the more money is to be made by middlemen.

appendix-rock 2y ago
[flagged]
- rightbyte 2y ago
  I miss simplicity. And I could argue that lower prices implies money is made somewhere else. Like how Cloudflare infested half the internet with their free MITM. But, ye, I should chill a bit on topics like these. I have hard time not ending up in a 'Google etc. is coming for me' rant.
- dang 2y ago
  We've banned this account for repeatedly breaking the site guidelines. Please don't create accounts to break HN's rules with. If you don't want to be banned, you're welcome to email hn@ycombinator.com and give us reason to believe that you'll follow the rules in the future. They're here: https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html. It's particularly bad to do this when you're knowledgeable and (let's assume) correct on a topic, because then the bad parts of your comment (such as personal attacks) end up discrediting the truth. That doesn't help anyone. https://hn.algolia.com/?dateRange=all&page=0&prefix=true&sort=byDate&type=comment&query=truth%20discredit%20by:dang https://hn.algolia.com/?dateRange=all&page=0&prefix=true&sor...
remram 2y ago
100 year certs require a consultant when the 100 years are up on any certificate and no one has any idea how the system was set up. They require a consultant when there's a security breach and you have to figure out which of the many certs you have ever used is compromised, or let the attackers in. The hope is that 45 day certs don't require consultants because if you don't set it right you'll find it right away... and of course the risk of leak is much lesser.
ndsipa_pomu 2y ago
It's very easy to use free certificates (e.g. LetsEncrypt) that can use a free script to automate the renewal of them. There's also plenty of free guides on how to use them for various web servers etc. That comes to a grand total of nothing. If you'd rather pay someone else to do it for you, then that's your own issue and not really anything to do with the length of certificate validity.

I think the problem that 100 year certs don't require a complicated SaaS and consultant riddled circus as much. It is like credit cards. The more problem the more money is to be made by middlemen.

appendix-rock 2y ago

[flagged]

rightbyte 2y ago
I miss simplicity. And I could argue that lower prices implies money is made somewhere else. Like how Cloudflare infested half the internet with their free MITM. But, ye, I should chill a bit on topics like these. I have hard time not ending up in a 'Google etc. is coming for me' rant.
dang 2y ago
We've banned this account for repeatedly breaking the site guidelines. Please don't create accounts to break HN's rules with. If you don't want to be banned, you're welcome to email hn@ycombinator.com and give us reason to believe that you'll follow the rules in the future. They're here: https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html. It's particularly bad to do this when you're knowledgeable and (let's assume) correct on a topic, because then the bad parts of your comment (such as personal attacks) end up discrediting the truth. That doesn't help anyone. https://hn.algolia.com/?dateRange=all&page=0&prefix=true&sort=byDate&type=comment&query=truth%20discredit%20by:dang https://hn.algolia.com/?dateRange=all&page=0&prefix=true&sor...

remram 2y ago

100 year certs require a consultant when the 100 years are up on any certificate and no one has any idea how the system was set up. They require a consultant when there's a security breach and you have to figure out which of the many certs you have ever used is compromised, or let the attackers in. The hope is that 45 day certs don't require consultants because if you don't set it right you'll find it right away... and of course the risk of leak is much lesser.

ndsipa_pomu 2y ago

It's very easy to use free certificates (e.g. LetsEncrypt) that can use a free script to automate the renewal of them. There's also plenty of free guides on how to use them for various web servers etc. That comes to a grand total of nothing. If you'd rather pay someone else to do it for you, then that's your own issue and not really anything to do with the length of certificate validity.