a thoughtful web.
Good ideas and conversation. No ads, no tracking.   Login or Take a Tour!
comment by AlderaanDuran
AlderaanDuran  ·  2901 days ago  ·  link  ·    ·  parent  ·  post: Lets Encrypt SSL

    Certs expire after only 90 days

Yeah... that's a deal breaker for a company my size. Just on my two web apps I probably have 100+ certs and we do two year rotations. Yeah it's mostly scripted for the replacement, but I still gotta get on during a late night maint window, do a rolling release through the load pool, have QA smoke test each server, then do a pool smoke test, yada yada.

Not worth it. 90 days is far too fucking short. That introduces too much risk into an environment.

thank you for the info though!