Hello, SSL certificates are a pain. Should there be a non-profit organization, like a library, that can issue free trusted certficates? Should they still cost?
Thanks, Cornel Darden Jr. Chief Information Officer Casanova Information Services, LLC Office Phone: (779) 205-3105 Mobile Phone: (708) 705-2945 Sent from my iPhone > On Jan 14, 2016, at 1:20 PM, Eric Hellman <e...@hellman.net> wrote: > > A while back, the issue of needing a wildcard certificate (not supported by > Lets Encrypt) for EZProxy was discussed. > > In my discussions with publishers about switching to HTTPS, EZProxy > compatibility has been the most frequently mentioned stumbling block > preventing a complete switch to HTTPS for some HTTPS-ready publishers. In > two cases that I know of, a publisher which has been HTTPS-only was asked by > a library customer to provide insecure service (oh the horror!) for this > reason. > > It's been pointed out to me that while Lets Encrypt is not supporting > wildcard certificates, up to 100 hostnames can be supported on a single LE > certificate. A further limit on certificates issued per week per domain would > mean that up to 500 hostnames can be registered with LE in a week. > > Are there EZProxy instances out there that need more than 500 hostnames, > assuming that all services are switched to HTTPS? > > Also, I blogged my experience talking to people about privacy at #ALAMW16. > http://go-to-hellman.blogspot.com/2016/01/not-using-https-on-your-website-is-like.html > > <http://go-to-hellman.blogspot.com/2016/01/not-using-https-on-your-website-is-like.html> > > Eric > > > Eric Hellman > President, Free Ebook Foundation > Founder, Unglue.it https://unglue.it/ > https://go-to-hellman.blogspot.com/ > twitter: @gluejar >