Re: Website Certs Will Soon Last Only 47 Days

Theo <theom+news@chiark.greenend.org.uk> writes:

Richard Kettlewell <invalid@invalid.invalid> wrote:

Right, the organizations who will have a real problem are those still
renewing certificates manually. They have a choice between spending a
bit more on their own staffing, or automating renewal (probably
cutting their overall costs in the long run).

>
I can see this being a big pain for private infrastructure.  Much
networking gear, for example, has a web interface for uploading a
certificate, but not an automated flow for doing so.  If that gear is
also not able to reach the internet it can't do any kind of
'well-known' challenges.

Fair point. I think SCEP is the well-established ‘enterprise’ approach
to this (I don’t know the details though). But it’d be nice to see
device vendors supporting ACME more widely.

--
https://www.greenend.org.uk/rjk/