It blasts the hackers off the face of the earth with orbital lasers! killer robots sever their network connection! It’s twirling a revolver on its finger while smoking three cigarettes!
And sometimes, that revolver goes off in your face, and it posts your private key on 4Chan.
In a previous life, I routinely blocked anything from a free cloud host or cert provider. There was rarely a business justification for accessing a site or service hosted on DigitalOcean or signed by LetsEncrypt. Sure, get an SSL cert and host for your personal project - so I wasn’t mad at the services - but it was a signal that the endpoint was not trustworthy beyond the TCP packets.
I suspect that AWS/GCP/Azure has made that much harder.
Yeah now let’s encrypt and other free cert providers are ubiquitous so it doesn’t make sense to block them. But you do need EV ssl for certain industries and markets like banking.
Just leaving their bare ass out there with no ssl, smh
It’s only one ssl. How much could it possibly cost? 4 dollars?!
I the worst part is deciding which flavor to get
Jesus… TIL
They can also be gotten for free through many providers, the biggest one in self-hosting is LetsEncrypt
I like that the most expensive one is called “wildcard”.
Sounds like it’s gonna perform AMAZING feats of security some of the time and just not work at all at other times.
Kinda like the wild mage of encryption 😁
WILDCARD SECURITY
It blasts the hackers off the face of the earth with orbital lasers! killer robots sever their network connection! It’s twirling a revolver on its finger while smoking three cigarettes!
And sometimes, that revolver goes off in your face, and it posts your private key on 4Chan.
Imma flex my EV
Isn’t TLS/SSL something at the server level and not the domain provider level?
You have to get a certificate from a provider which can verify you control the domain.
Once you’ve proved control you install the signed certificate with the secret private key on your server.
You can get certificates for free via Let’s Encrypt and a bunch more CA’s. It hasn’t been expensive for ages, unless you want fancy corporate support.
Corporate support can be a big deal.
In a previous life, I routinely blocked anything from a free cloud host or cert provider. There was rarely a business justification for accessing a site or service hosted on DigitalOcean or signed by LetsEncrypt. Sure, get an SSL cert and host for your personal project - so I wasn’t mad at the services - but it was a signal that the endpoint was not trustworthy beyond the TCP packets.
I suspect that AWS/GCP/Azure has made that much harder.
Yeah now let’s encrypt and other free cert providers are ubiquitous so it doesn’t make sense to block them. But you do need EV ssl for certain industries and markets like banking.
I tried securing my ass, but my browser got stuck.