Let's Encrypt makes certs for 30% of web domains
leebutterman.com
Let's Encrypt makes certs for 30% of web domains
1–10 of 147 posts
Re: Let's Encrypt makes certs for 30% of web domains
#2Author here. I'd figured they were big, but I had no idea that big until I did a www-wide TLS scan. Here for questions
Re: Let's Encrypt makes certs for 30% of web domains
#3Author here. I'd figured they were big, but I had no idea that big until I did a www-wide TLS scan. Here for questions
Kinda surprised that Google is so much bigger than Amazon...
Re: Let's Encrypt makes certs for 30% of web domains
#4Re: Let's Encrypt makes certs for 30% of web domains
#5Author here. I'd figured they were big, but I had no idea that big until I did a www-wide TLS scan. Here for questions
Kinda surprised that Google is so much bigger than Amazon...
Keep in mind that Amazon now offers their own free certs for customers that aren't from LE. That probably also has a big impact on things.
Re: Let's Encrypt makes certs for 30% of web domains
#6The GCP self-serving platform for certs is very welcome, but still kinda janky. You end up waiting hours for their batch jobs to run at unknown cycles.
Let's encrypt is awesome because it's instantaneous! You'd think Google would understand that aspect.
Edit: GCP people: Please give us a an explicit "retry" button to press when we've set up the DNS records. (I'm talking about the Google Cloud Balancing Service here. The UI was awesome up until the point it wasn't. The one thing lacking was a "retry" button.)
Re: Let's Encrypt makes certs for 30% of web domains
#7This kind of centralization is not good. Even thought let's encrypt is non profit and has a very good service record. We desperately need more like it spread around the globe.
Re: Let's Encrypt makes certs for 30% of web domains
#8Earlier quoted context omitted.
Kinda surprised that Google is so much bigger than Amazon...
Keep in mind that Amazon now offers their own free certs for customers that aren't from LE. That probably also has a big impact on things.
Yea that's why I'm surprised that Google has issued more certs than Amazon has :P.
Re: Let's Encrypt makes certs for 30% of web domains
#9A few of these things, while not necessarily wrong, should be put into context.
E.g. "Hundreds of thousands of domains' certs expire after 2099". Yeah, but no publicly trusted certs. They're capped at a bit more than 2 years and there's a discussion to cap them even more.
The certs they're seeing are almost certainly mostly: "let's create a test selfsigned cert for this host. how long should it last? let's type in a large number so we aren't bothered by it any time soon."
Re: Let's Encrypt makes certs for 30% of web domains
#10can someone please share how they deploy/distribute Let's encrypt certificates with auto renewal on load balanced multiple EC2 servers for the same dns name. I had tried this a while but had to give up and just bought SSL certs which I then include in my EC2 image.