We like transparency and we're a CA, hackers hack all night and we log all day

Let’s Encrypt has wheeled out a new certificate transparency log called Oak, which is funded for a year by the certificates arm of Sectigo (formerly known as Comodo). As well as the obvious corporate social responsibility impact for Sectigo, it helps ease pressure on an increasingly important piece of internet security …

[m0rt]

I like Let's Encrypt.

I know not everyone does. But I do. It makes me feel all warm and fuzzy inside every three months when I see my domains update their cert automatically.

[Anonymous Coward]

Automate once, check twice.

Where do you see that? Just in the logs, on your server's file system, or in the actual connection? Places that did not notice in the past that their automatic LE rollover didn't work include dnssec-tools.org and Thunderbird's own update servers.

[m0rt]

Re: Automate once, check twice.

Email.

If I was suitably arsed, I would write a script that checks for the email and sends me an email when it doesn't get the email.

Or proper monitoring.

[david 64]

"It’s only six inches...

...but it makes a big difference.”

*Snigger*