Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Our First Certificate Is Now Live

letsencrypt.org

Post reply on HN
Print view View original

151–160 of 263 posts

Re: Our First Certificate Is Now Live

#151

Post by chrissnell »

kuschku wrote: post #138
nhebb wrote: post #123

Earlier quoted context omitted.

Just removing the font-weight: 300 helps tremendously. Personally, I'm becoming less of a fan of external fonts. I've noticed lately that they're often the slowest thing to load on sites that use them (especially Google fonts).

I downloaded all of Google’s font library and installed it locally, means I can read the fonts without having to load them from Google. Still doesn’t help against fonts with 0.5px thin lines.

Back in the day, running a massive library of fonts slowed down many apps. Is this still the case? I'm running Mac OS X 10.10.

Re: Our First Certificate Is Now Live

#152

Post by cel »

danellis wrote: post #116
bracewel wrote: post #36

Earlier quoted context omitted.

The major problem with this is that the IETF validation working group hasn't come up with a definite procedure for deciding what the apex of a domain is, and how to validate control over all subdomains above it yet.

No? I thought I'd seen a list of them somewhere authoritative. Anyone know what I'm talking about?

Yes, the Public Suffix List: https://publicsuffix.org/

Re: Our First Certificate Is Now Live

#153

Post by kolev »

readme wrote: post #118
kolev wrote: post #79

Earlier quoted context omitted.

These shameless plugs are getting really annoying. We know about you, we know CloudFlare and Let's Encrypt are kinda competitors with their free certificates, but you don't have to comment on each post about them. Really, stop annoying us - it doesn't do you any good, honestly!

Who's us? I didn't know you represented me. I actually had never heard of this and think it's pretty cool.

Grab a dictionary - there's "us", and there's "all".

Re: Our First Certificate Is Now Live

#156

Post by hinkley »

LeoNatan25 wrote: post #134
nhebb wrote: post #123

Earlier quoted context omitted.

Just removing the font-weight: 300 helps tremendously. Personally, I'm becoming less of a fan of external fonts. I've noticed lately that they're often the slowest thing to load on sites that use them (especially Google fonts).

The weight works great on a high DPI display, but on older displays, it just doesn't work. Open on a rMBP or iPad, and it's beautiful. I'm guessing the designers are working on a high DPI Mac.

I am on a rMBP and I wouldn't call it beautiful.

It's painfully thin, and the eyestrain factor is pretty high.

Re: Our First Certificate Is Now Live

#157

Post by dingaling »

kodablah wrote: post #43
ck2 wrote: post #23

Everyone repeat after me, wildcards, wildcards, wildcards. (just hoping they will appear next year) One more nail in the coffin of the ssl cert mafia.

While I too would like to see wildcards, doesn't the fact that you can programmatically obtain a cert for a subdomain obviate most of the wildcard needs? Sure it's a bit more difficult but if your service has some form of sorts to make a subdomain work for a specific word, surely it can request the cert at that time. Having said that, obviously keeping track of only one cert and not having to build this into your app…

Without wildcards you can't use the automated tool to pre-provision new servers, for example.

Say 1.example.com is in production and is to be swapped for new1.example.com which is in staging.

new1 can't obtain a useful cert from Let's Encrypt until it becomes 1 in Internet-facing DNS. So you have a service discontinuity whilst moving 1 -> old1 and new1 -> 1 and then applying for the cert.

I appreciate that the set of people managing such issues probably aren't the target market ( they also won't be running an as-root tool to make automated changes on their edge servers... ) but it's an example of why wildcards are so useful.

Re: Our First Certificate Is Now Live

#158

Post by kuschku »

chrissnell wrote: post #151
kuschku wrote: post #138

Earlier quoted context omitted.

I downloaded all of Google’s font library and installed it locally, means I can read the fonts without having to load them from Google. Still doesn’t help against fonts with 0.5px thin lines.

Back in the day, running a massive library of fonts slowed down many apps. Is this still the case? I'm running Mac OS X 10.10.

I’m on linux, and yes, it does. Opening the font selection menu can take for me, with 7000 installed fonts, about half an hour sometimes. I just don’t do that, instead select fonts by name (I know most of them now).

But you don’t notice it until you open a font selection menu.

Re: Our First Certificate Is Now Live

#159

Post by MertsA »

What's the target audience of the beta program? I'd love to play around with this on a personal domain but I doubt that there will be more than 2 or 3 unique visitors between now and general availability. Do they want signups for the beta program irrespective of the traffic volume of the site or would toy site signups just be more of a hassle for someone to approve?

The verbiage on that page isn't very clear on if there's some manual process for approving beta participants or if it's just grab 100 entries a week out of a Google Sheets page.

Re: Our First Certificate Is Now Live

#160

Post by ErikRogneby »

toomuchtodo wrote: post #7
Someone1234 wrote: post #2

This is a tiny bit odd. So they have issued their first certificate, but they don't have cross-signing in place yet? So between now and november 16th they'll be issuing a whole bunch of effectively broken certificates unless people manually install their root CA? Why even push this today if you don't have cross-signing available? Without that Let's Encrypt is effectively broken out of the box. PS - I actually like Le…

Baby steps. This is a huge step forward, and I'm willing to cut them some slack considering they're about to shake up an entire industry. EDIT: Kudos everyone working on Let's Encrypt. You're doing awesome work.

For real. This is so damn awesome I feel like letting out a Howard Dean like yell.
Post reply on HN