[H-GEN] LetsEncrypt - anybody using them yet? Reservations?

[Timothy White]

I was playing with it during the closed beta.
Now that it's public beta and I don't need whitelisted domains, I'm playing
with it even more.

I found
https://johnmaguire.me/2015/12/configuring-nginx-lets-encrypt-automatic-renewal/
really helped me get it working with Nginx, given that the automatic plugin
for Nginx is disabled due to issues.

Reasons to not use? If you need an EV cert for something? Reasons to use,
we can encrypt everything! :D

I'm happy, even if some have expressed dislike at the 90 day certificate
lifetime. One project even rejected LE as an included CA because they feel
the 90 day bit is LE trying to enforce policy that shouldn't be up to the
CA to enforce. I've read lots of opinions about the 90 day lifetime, and I
think they have good reasons to start with 90 days, and they'll evaluate
extending it in the future. 90 days hasn't been an issue for me now I've
got auto renewal working.

Tim

On Tue, Dec 15, 2015 at 4:10 PM, Daniel Devine <devine at ddevnet.net> wrote:

> [ Humbug *General* list - semi-serious discussions about Humbug and     ]
> [ Unix-related topics. Posts from non-subscribed addresses will vanish. ]
>
> I've been keeping an eye on the Let's Ecnrypt (https://letsencrypt.org/)
> CA. It does things quite differently to CACert however I think it's really
> what everybody has been needing for many years now. It's now in public beta
> so you can go try it now.
>
> Does anybody have good reasons why I/we shouldn't start using Let's
> Encrypt besides unresolved bugs in the client software?
>
> I look forward to moving off StartSSL.
>
> --
> Daniel Devine
> _______________________________________________
> General mailing list
> General at lists.humbug.org.au
> http://lists.humbug.org.au/mailman/listinfo/general
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.humbug.org.au/pipermail/general/attachments/20151216/447e6840/attachment.html>