D4no0
Letsencrypt to end sending reminders by email this June
Wow, this is quite the news, I will paste it here so it remains as history (received it as mail recently):
Since its inception, Let’s Encrypt has been sending expiration notification emails to subscribers that have provided an email address to us. We will be ending this service on June 4, 2025. The decision to end this service is the result of the following factors:
- Over the past 10 years more and more of our subscribers have been able to put reliable automation into place for certificate renewal.
- Providing expiration notification emails means that we have to retain millions of email addresses connected to issuance records. As an organization that values privacy, removing this requirement is important to us.
- Providing expiration notifications costs Let’s Encrypt tens of thousands of dollars per year, money that we believe can be better spent on other aspects of our infrastructure.
- Providing expiration notifications adds complexity to our infrastructure, which takes time and attention to manage and increases the likelihood of mistakes being made. Over the long term, particularly as we add support for new service components, we need to manage overall complexity by phasing out system components that can no longer be justified.
For those who would like to continue receiving expiration notifications, we recommend using a third party service such as Red Sift Certificates Lite (formerly Hardenize). Red Sift’s monitoring service providing expiration emails is free of charge for up to 250 certificates. More monitoring options can be found here.
While we will be minimizing the email addresses we retain connected to issuance data, you can opt in to receive other emails. We’ll keep you informed about technical updates, and other news about Let’s Encrypt and our parent nonprofit, ISRG, based on the preferences you choose. You can sign up for our email lists below:
What do you personally think about this, we failed as individuals to offer support? I think such warning emails were very important for many small organizations, I can’t tell how many times it saved my skin in small orgs where I was the one responsible for https support
not to tell how handy it was to all of us.
Most Liked
princemaple
hauleth
That is the problem here. It is not just hosting a server, you also need to:
- monitor it
- secure it
- store email addresses somewhere (securely as it is PII)
- monitor its reputation
- manage DKIM/SPF
- setup GDPR policy and have GDPR officer responsible for reacting to breaches
So it became more and more complex. It is simple if you do it as a toy, not if it is for a large endeavour like LE. Also, with such email service you may create unfounded trust that LE will always remind you about expiration dates, while there is no such contract or obligation on LE side. If you want to ensure that your certificates are always viable, then you need to setup monitoring on your own anyway. So that LE messages only cause problems for LE in my opinion, for no real gain.
gregvaughn
Note, you can even manage renewals right in your supervision tree. The Erlangelist - Operating via development
Popular in Discussions
Other popular topics
Chat & Discussions>Discussions
Categories:
Sub Categories:
Forums
Popular Tags
- #ecto
- #liveview
- #troubleshooting
- #learning-elixir
- #deployment
- #library
- #erlang
- #testing
- #genserver
- #mix
- #absinthe
- #remote-other
- #otp
- #plug
- #how-to-question
- #macros
- #postgres
- #channels
- #elixirconf
- #exunit
- #discussion
- #code-sync
- #javascript
- #podcasts
- #onsite
- #dialyzer
- #docker
- #authentication
- #umbrella
- #full-time-contract
- #podcasts-by-brainlid
- #ecto-query
- #elixir-ls
- #phoenix_html
- #iex
- #blog-post
- #graphql
- #genstage
- #ai
- #websockets
- #supervisor
- #elixirconf-us
- #advent-of-code
- #distillery
- #processes
- #forms
- #api
- #metaprogramming
- #hex
- #security










