3 ms·
> For this reason, and because even the 2027 changes to 100-day certificates will make manual procedures untenable, we expect rapid adoption of automation long
by junaru 1y ago
> For this reason, and because even the 2027 changes to 100-day certificates will make manual procedures untenable, we expect rapid adoption of automation long before the 2029 changes.
Oh yes, vendors will update their legacy NAS/IPMI/whatever to include certbot. This change will have the exact opposite effect - expired self signed certificates everywhere on the most critical infrastructure.
- panki27 1y agoPeople will just roll out almost forever-lasting certificates through their internal CA for all systems that are not publicly reachable.
- throw0101d 1y ago> through their internal CA Nope. People will create self-signed certs and tell people to just click "accept".
- Avamander 1y agoThey're doing it right now and they'll continue doing so. There are always scapegoats for not automating.
- xnyanta 1y agoI have automated IPMI certificate rotation set-up through Let's Encrypt and ACME via the Redfish API. And this is on 15 year old gear running HP iLO4. There's no excuse for not automating things.