Let's Encrypt is down
letsencrypt.status.io
Let's Encrypt is down
1–10 of 167 posts
Re: Let's Encrypt is down
#2Was fun finding this out during a random server cycle. Turns out, Caddy doesn't appreciate the ACME server being down, and refuses to start :)
Re: Let's Encrypt is down
#3On the plus side, as a side effect to this event, most of libraries shall start handling this case in better robust ways..
Re: Let's Encrypt is down
#4This is also why you don't wait until the last day before renewing. (But no-one does that, right?)
Re: Let's Encrypt is down
#5This is also why you don't wait until the last day before renewing. (But no-one does that, right?)
>But no-one does that, right?
Sadly, reality is not that nice and I can already feel a disturbance in the force in form of "Why Lets Encrypt is bad and you should by 1 year certs" blog posts all over the place.
Re: Let's Encrypt is down
#6Just spent an hour debugging why development scripts work but production doesn't.. Good reminder to configure some kind of notifications from AWS Lambda also when the execution times out, not just on errors.
Re: Let's Encrypt is down
#7Nothing against letsencrypt but dependencies on services to be online is fragile and will break. Their 90 day limit makes it worse. Saying its for security is like saying 1 or 3 year certs are somehow insecure which is not the case. It's one more headache for an admin to think about even if automated.
We really should reexamine the CA system. Self signed certs should have more value than they currently do, and identity can be verified by out of band methods. Surely it's worth exploring.
What we have now effectively disempowers individuals and centralizes essential services which cannot be good in the long run.
Re: Let's Encrypt is down
#8This is also why you don't wait until the last day before renewing. (But no-one does that, right?)
If you use one of the myriad of automated tools for using LE, you will get your cert renewed as early as 30 days before it expires. So right now the issue should only be with new domains getting certs.
If you renew LE certs manually, first what is wrong with you and don't you like yourself? Second, at that point it's no different than NameCheap going down and you getting your cert from 1and1 instead.
Re: Let's Encrypt is down
#9Nothing against letsencrypt but dependencies on services to be online is fragile and will break. Their 90 day limit makes it worse. Saying its for security is like saying 1 or 3 year certs are somehow insecure which is not the case. It's one more headache for an admin to think about even if automated. We really should reexamine the CA system. Self signed certs should have more value than they currently do, and identi…
I don't disagree about CAs, but LE suggests to renew certs every 60 days. So unless this outage lasts a month or some acme tool is poorly made it shouldn't affect anything except new registrations.
Re: Let's Encrypt is down
#10I think LE is a huge boon to the internet. But I would really love for someone like Amazon, Google, Facebook, or Microsoft to set up a separate provider that implements the same thing. Redundancy is super important here and clearly just one organization can't guarantee 100% uptime.