Hacker News Reader

> For this reason, and because even the 2027 changes to 100-day certificates will make manual procedures untenable, we expect rapid adoption of automation long before the 2029 changes.

Oh yes, vendors will update their legacy NAS/IPMI/whatever to include certbot. This change will have the exact opposite effect - expired self signed certificates everywhere on the most critical infrastructure.

View on HN

I have automated IPMI certificate rotation set-up through Let's Encrypt and ACME via the Redfish API. And this is on 15 year old gear running HP iLO4. There's no excuse for not automating things.

People will just roll out almost forever-lasting certificates through their internal CA for all systems that are not publicly reachable.

> through their internal CA

Nope. People will create self-signed certs and tell people to just click "accept".

Reply on news.ycombinator.com