Hacker News Reader

It's not going to make it easier, but if you can already answer challenges - then it won't make it any harder.

You just don't stop answering challenges until the cert gets issued.

I don't know why anyone would have stopped answering challenges after the first request anyway. Surely the default assumption should be that everyone has network & processing failures, and hey maybe ACME would need to check again if something broke before the cert was signed.

You should check out https://community.letsencrypt.org and ask for help there!

How does it make it any more difficult?

I hear this often and also had issues with this. Shameless plug for my project, Certera. Solves that problem and much more.

https://docs.certera.io

If you or your company has enough money for a web farm, you should just buy your own cert.

What? Web farms are automatically expensive? A web farm can literally be two Raspberry Pis behind a simple load balancer. What if this isn't "my company"? What if I run a web farm at home for fun?

Besides, your argument could be used to justify any price hike! "If you can afford X, then you can afford Y!"

Why isn't your LB terminate TLS?