Hacker News Reader

Comment by eeeeeeeeeeeee | Hacker News Reader

He's either being disingenuous or he's terribly misinformed about how things work. Either one is unacceptable for the CEO of a major certificate provider.

Also, I feel even better about dropping ALL of my Comodo certs and switching to Lets Encrypt. I can't wait to never have to go to the Comodo website again.

View on HN

> He's either being disingenuous or he's terribly misinformed

He's trying to register the Lets Encrypt trademark and deflecting with "but they didn't so we can". I don't think there's a question of being disingenuous.

this/hacker news is a Comodo SSL website...

Can you already use let's encrypt with cloudflare? (HN uses it for protection)

You can use any custom certificate, but you'll need the Business ($200/month) plan.

To be more precise, I meant "is there a way to automatically manage CF certificate from LE". There are many ways to manage local certs (or update things by hand), but if you can't automatically update the CF one, it's going to be a bit of a problem.

Looks like CloudFlare has an API endpoint for certificate management[1], so this should be possible, though I haven't seen any tooling for this specifically.

[1]: https://api.cloudflare.com/#custom-ssl-for-a-zone-properties

It's definitely doable, I ran across some examples [1] while looking for an automated process for renewing within docker.

[1]: https://github.com/AnalogJ/lexicon

Reply on news.ycombinator.com