Hacker News Reader

A website in 2022 that doesn't use HTTPS? It takes like 5 minutes to install certbot...

... and a lifetime to monitor and administer it.

Certbot (and other acme clients such as acme.sh) are practically set and forget. I’ve never once had to touch those configs again once they were made ~4 years ago.

Certbot is a snap application nowadays. I was pretty screwed up when I decided to install it on CentOS system without SELinux, which snap requires.

But I would agree here, even when I had the problems with LE (botched cron config) it only required me to 'administer' it 4 times a year. And when I fixed cron config I don't need to do even that.

I’ve personally switched to using acme.sh over certbot. Much easier to setup (since it’s just a bash script) and supports practically every DNS API.

Time I've spend monitoring and administering certbot over the last few years: 0.

Reply on news.ycombinator.com