From: stormreaver
Written: 2016-01-13 11:26:36.639828
Subject: Let's Encrypt

This morning, I received a free encryption certificate from the "Let's Encrypt" service for all of my domains. My bottom line is that the process was very easy and painless, and I highly recommend it.

As a Linux system administrator, I've had to buy encryption certificates from the common providers. The Linux side of the equation is fairly simple, as installing encryption certificates for Apache is pretty straight-forward, but the certificates are really expensive and can take a long time to receive.

With Let's Encrypt, I downloaded their automation client, typed a simple command, answered one really simple question (allow both encrypted and unencrypted connections, or force site-wide encryption), and waited a minute until the program said everything was done. At this point, all of my domains were encryption enabled. It didn't cost me a dime, and all major browsers recognize it.

Excellent job, Let's Encrypt team!
From: stormreaver
Written: 2016-04-04 07:02:34.455187
I have done my first renewal of my Let's Encrypt certificates, and everything was flawless. I merely ran:

letsencrypt-auto renew

That was it. All of my certificates renewed flawlessly and automatically.

This is how encryption should have been done on the Web from the start.
From: skaperen
Written: 2023-05-29 23:19:23.331573
those commercial certificates run longer before expiring and have more staff research going on behind the scenes. so, of course, they have a high cost. but "Let's Encrypt" is a great solution for quite many projects, people, institutions, small businesses, and anywhere there's too much money tracking slowing things down.
From: stormreaver
Written: 2023-06-13 19:03:51.16503
While they do run longer (a year instead of three months), Let's Encrypt's renewal process is automatic and transparent. The commercial certificate companies' research staff have been neglecting their duties for decades, making them largely useless. They confessed as much when the Extended Validation certificates came into being. That was when they promised that they would actually do what they had promised they were doing all along.
You must register an account before you can reply.