Forgot your password?
typodupeerror

Comment Re:Switch to a new technology (Score 1) 76

If the existing certificate process is so poor that they need swapped out every 90 days then it is time to move on to something else.

People have been talking about this for over twenty years, and here we are. Have you got anything better than the current certificate process? The truth is that certificates and their management suck, but that's the least bad approach that we have been able to come up with so far.

Comment Re: Very Annoying (Score 1) 76

The truth is that we depend on many components that can fail at any time and that most of us will have no clue how to fix. Your are focusing on one, while apparently taking the reliability of the others for granted. Yes, your certificate renewal automation can fail, but so can your computer, modem, router, power, etc. That's life.

Comment Re: Very Annoying (Score 1) 76

Sounds like theres a need for an easy automation solution.

Well, Letsencrypt's framework looks daunting to the uninitiated, but the truth is that anything to do with this type of certificates does anyway, by their own nature. I set up mine a while ago, with safeguards to notify in case of failure, for three separate Linux systems driven from a single one, and it was not that complicated. Granted, I am more experienced than the average Joe, but we are talking Bash scripts twenty lines long or so, not convoluted stuff using lots of different files, libraries and whatnot, and requiring an expertise on lots of different issues, include the details of what the heck the blasted certificates do. I.e. something pretty much within the capabilities of a somewhat competent sysadmin.

Slashdot Top Deals

If you think the system is working, ask someone who's waiting for a prompt.

Working...