I think Cloudflare enshittifying is a bigger risk that Let’s Encrypt.
Aussie living in the San Francisco Bay Area.
Coding since 1998.
.NET Foundation member. C# fan
https://d.sb/
Mastodon: @dan@d.sb
I think Cloudflare enshittifying is a bigger risk that Let’s Encrypt.
ZeroSSL, plus a few paid companies support ACME (I know Sectigo and GoDaddy do). Sure, the latter are paid services, but in theory you can switch to them and use the exact same setup you’re currently using with Let’s Encrypt, just with some config changes.
They also made it a open protocol (the ACME protocol), so now there’s a bunch of certificate providers that implement the same protocol and thus can work with the same client apps (Certbot, acme.sh, etc). I know Sectigo and GoDaddy support ACME at least. So even if you don’t use Let’s Encrypt, you can still benefit from their work.
I remember the days when each site that wanted to use SSL had to have a dedicated IP.
Why not script it so you don’t have to do it manually?
TLS certificates have huge margins, so web hosts love selling them.
I’d also argue that the fact that it’s 100% automated and their software is open source makes it objectively more secure. On the issuing side, there’s no room for human error, social engineering, etc.
Sometimes the open source equivalent is better. SmartTube is a much better app than the official YouTube app for Google TV / Android TV even though there’s just one developer working on it. Even if it didn’t support ad blocking, I’d still use it. Very nice app.
Similarly, pirate TV/movie apps often have a much better user experience than the legit ones. Compare Weyd, Syncler, or Stremio+Torrentio to the Amazon Prime video app for example. At least on Android (phone, tablet, TV), the Amazon app is garbage even though there’s highly paid employees working on it.
In both cases, the people who work on the independent apps usually care about the user experience and use the app day-to-day themselves, rather than being told to do whatever makes the most money for the company. They have no reason to lock you in or otherwise force you to use the app, and instead compete just by having a better app.
Thanks for the links. I appreciate it! Now I understand the issue.
It’s the only voting system in existence where ranking someone higher on the ballot can cause them to lose the election.
Interesting… Do you have an example of this?
I don’t understand why the USA doesn’t use preferential voting like Australia does: https://www.chickennation.com/voting/
Instead of just picking one candidate/party, you number them based on your preferences. First all the #1 votes are counted. If no party gets the majority (over 50%) of votes, the party with the least number of votes is removed, and for everyone that voted for them, their #2 votes are used. Repeat until someone wins.
Independents (what you call “third-party” in the USA) can win, and any party that gets over 4% of the #1 votes gets election funding from the government (a fixed amount per vote).
At least here in California, having solar panels on a non south facing roof usually only reduces production by 10-20%, as long as it’s not entirely north facing. Solar systems are often slightly undersized - it’s more cost effective to size it so it handles average load rather than the summer peaks you only see for a few weeks per year - so the actual difference for a given system may be less.
With my system, I see the best output from south-east facing panels since they get the morning sun. West facing panels are also fairly popular here due to time-of-use electricity plans. Some electricity plans have peak pricing from 4 to 9 pm, so people want to try and collect as much sunlight as possible during that period before sunset.
They’re installing ridiculously small systems so that they’re barely compliant, but the systems aren’t very useful to the people that buy the house.
I don’t think I know enough to answer that question, sorry!
They use a mixture of Windows and Linux. They do use Linux quite a bit, but they also have a lot of Hyper-V servers.
The GUI is optional these days, and there’s plenty of Windows servers that don’t use it. The recommended administration approach these days is PowerShell remoting, often over SSH now that Windows has a native SSH server bundled (based on OpenSSH).
Linux isn’t a UNIX flavor. It’s UNIX-like.
Microsoft could technically get Windows certified as UNIX.
I don’t think they could now that the POSIX subsystem and Windows Services for UNIX are both gone. Don’t you need at least some level of POSIX compliance (at least the parts where POSIX and Unix standards overlap) to get Unix certified?
Shouldn’t be too difficult to swap it out for ZeroSSL. You’d need to remember to update CAA records though.