Personally, I distrust any ecommerce site that uses any free cert. I see paid cert as a commitment to do honest business, as they need to have some records on the CA.
But for a blog or anythings other than ecommerce is totally fine by me.
Note: It is not about security, nor automation, but a show commitment (i.e. buying a cert), largely psycological.
LetsEncrypt is legit. A downside is that the certs expire after 90 days. However, that also carries an upside in that it limits the damage in case a certificate is compromised. There are procedures by which you can automatically renew/request (I forget whether they allow renewing an existing cert or require a brand new one) LE certs and apply them to your application, but that can be fiddly to configure.
If you're not comfortable with configuring automatic certificate cycling, a long-term paid cert would be more appropriate.
I didn’t say it isn’t legit nor I distrust automation, but I would like to see anyone operating an online shop paid for a cert to show they are honest and won’t diappear in thin air not delivering. Am I going to get back what I paid, properly not, but a basic DV cert isn’t expensive either for a business.
It makes sense that they issue short certificates, though. The sole verification is that you own the domain. If you sell/let the domain lapse and someone else takes it over, there's only a limited time you would hold a valid certificate for it.
Most paid certs aren't worth much anyway. Payment and delivery info for DV certs isn't validated by anyone, it's literally the same concept as Let's Encrypt. OV and EV are the only ones that theoretically have any value, but nobody is using those ever since they got rid of the URL bar labeling; even Amazon is on DV nowadays.
Rental agency ran out of the car I chose. Gave me this pos. I banged my head getting in three times before I remembered: this is the worst car ever made.
I got into Pokémon when the card game and anime first came to America. I was in jr high school at the time and collected so many of the original cards. Never finished my collection, though.
I got into the Pokémon craze at first, but stopped following it in my later years of high school. I was too busy preparing to be an adult, so I set it aside and forgot about it for years. I didn’t even know there were more than 151 Pokémon until over a decade later.
I learned some of the newer generations with Pokémon Go, but I still remember all of the original 151 Pokémon. The newer stuff is just weird to me.
EDIT: I never got into the games, even though they started releasing when I was a teenager. Pokémon Go was actually my first game in the franchise; although I watched my friends play the classic Red and Blue games back in the day.
Will they cover massacres supported by the USA in palestine and elsewhere? Will they talk about cops murdering people? These are the actual foundations of gun violence. It’s propaganda to only talk about the symptoms.
I’ve used Lets Encrypt for years and years, in fact it’s been at least 6?. LE with the encryptbot?, automate the entire process, and then completely forget about it until someone posts on Lemmy asking about it.
It’s been long enough I’ve forgotten the proper names of the software and I would have to go back through my notes to recreate it.
kbin.life
Oldest