I, Like most people have a love hate relationship with PKI, Certificate Authorities, and the rest of that heart attack in a box. Many are the clients that forgot all about the lecture I gave them 3 years ago about “updating the credit card number with their cert provider”. They give me panicked calls about how their website got hacked because its now showing up as insecure. Well no more! I recently found out about a cool project called Let’s Encrypt, that uses a little bot to request a new cert every 90 days, for free!
In fact, this very website is now encrypted with a Let’s Encrypt cert. I have been using them for all sorts of things! my Media server, my TrueNas server, my fortigate routers. It is a huge expedient to not have to buy (and rebuy) certs!
