Hacker News Reader

Caddy mitigates this by falling back to ZeroSSL if it couldn't issue a cert from LE: https://caddyserver.com/docs/automatic-https#errors

The keys to the kingdom are ever more being placed in the hands of relatively few internet custodians. Figuratively here of course, since the private keys are generated locally and never transmitted to LE.

Is it really a single point of failure though? Certificates are renewed well in advance, and there are several free alternatives with ACME support to LetsEncrypt today.

Switching to a new provider in case LetsEncrypt goes down is as simple as updating your scripts.

A large number of sites use LE, and only LE.

Perhaps this move will mean people actually update their scripts and get it working on another system

Why? If you only renew at the last day you will run into troubles independently of Lets Encrypt.

Buypass, ZeroSSL also provide free certificates with ACME.