undefined | Better HN

0 pointsjakobdabo9y ago0 comments

The majority of the big sites that people use (Google, GMail, Youtube, Facebook, Reddit, NYT, WaPo, etc.) are already being served using HTTPS. I think if a couple of HTTP sites an average user still browses start showing these warnings they will notice them. And what matters, the owners of those websites will notice them and will ask their "IT guy" hey "why our website is marked as insecure? I want a green lock like Gmail has".

0 comments

johndoe45899y ago

Their IT guy?? There are gazillions of people like me who have a blog, or some small project that has a small audience of tens to just a few thousand users. All these people now have to fork for SSL, or have to move everything to a different shared hosting that supports Let's Encrypt.

icebraining9y ago

Your shared hosting service doesn't need to support Let's Encrypt, it just needs to allow you to upload a certificate. You can use https://gethttpsforfree.com/ to generate it.

johndoe45899y ago

They want an "installation" fee.

And then how does the renew process work?

2 more replies

the_duke9y ago

Right now, you can just put Cloudfront in between. It's free, and takes maybe 5 minutes to sign up and adjust your DNS entries.

Of course relying on a provider that might cancel the free plan at any time is not ideal, but worst case you just have to revert your DNS and it's done.

michaelmior9y ago

I assume you mean Cloudflare and not Cloudfront. While you could use Cloudfront, AFAIK there's no free option. (Aside from the usage you get as part of the AWS free but that is time-limited.)

1 more reply

johndoe45899y ago

I'm running a web app, isn't Cloudflare best for static / semi static content?

1 more reply

threeseed9y ago

And that IT guy will go well there isn't anything I can do about it.

The user will then forever ignore it (because they like that web site) and the whole exercise is wasted.

j / k navigate · click thread line to collapse

0 pointsjakobdabo9y ago0 comments

0 comments

johndoe45899y ago

icebraining9y ago

Your shared hosting service doesn't need to support Let's Encrypt, it just needs to allow you to upload a certificate. You can use https://gethttpsforfree.com/ to generate it.

johndoe45899y ago

They want an "installation" fee.

And then how does the renew process work?

2 more replies

the_duke9y ago

Right now, you can just put Cloudfront in between. It's free, and takes maybe 5 minutes to sign up and adjust your DNS entries.

Of course relying on a provider that might cancel the free plan at any time is not ideal, but worst case you just have to revert your DNS and it's done.

michaelmior9y ago

I assume you mean Cloudflare and not Cloudfront. While you could use Cloudfront, AFAIK there's no free option. (Aside from the usage you get as part of the AWS free but that is time-limited.)

1 more reply

johndoe45899y ago

I'm running a web app, isn't Cloudflare best for static / semi static content?

1 more reply

threeseed9y ago

And that IT guy will go well there isn't anything I can do about it.

The user will then forever ignore it (because they like that web site) and the whole exercise is wasted.

j / k navigate · click thread line to collapse