Hacker News Reader

Comment by taco_emoji | Hacker News Reader

Not sure I want to download an EXE from a non-SSL site...

The bottom download link points you to GitHub, where you can get exes straight from CI, if you trust that more.

I've looked into getting https from my site, but there's always a high cost associated, if you want a certificate that's widely accepted (which doesn't seem to hold for the free ones). And I think my host isn't even compatible with free ones.

If the web wants HTTPS everywhere, this somehow needs to be made simpler/cheaper for non-commercial entities.

> If the web wants HTTPS everywhere, this somehow needs to be made simpler/cheaper for non-commercial entities.

Cheaper as in free? https://certbot.eff.org/about/

Looks like I still would need to change hosts to use that.

You just need access to your web server configuration, which usually means root access to the hosting machine.

The current host is 1and1.. I don't think they support that, since they desperately are trying to sell you their own certificates. Also is shown on the certbot site with a big red cross :) Either way, probably a good reason to finally switch hosts.

You must have looked into LetsEncrypt. I’m not aware that there is any serious problem with acceptance of their certificates, is there?

Looks like there isn't since 2018.. somehow last time I looked into it there still was. Now I only have to change hosts..

If you are able to put a Caddy webserver in front of your website, it's quite easy using its automatic ssl feature[0]

[0]https://caddyserver.com/docs/automatic-https

Reply on news.ycombinator.com