ygjb-dupe

wow. The hero worship is strong with you. I agree that he has accomplished some pretty cool things, but calling him a "once-in-a-century" or "once-in-a-generation" person ignores all of the other people who have been as or more successful than him in multiple dimensions of success.

It's not surprising, consider the failure modes:

- a key is made public, and we have to call a user or refund them (for retention purposes)

- a key is made public, and we revoked the key, potentially breaking the customers builds/deploys and potentially knocking a customers stuff out (if, for example, a key is disabled during a push to production).

Hmm, I wonder if Alphabet will spin up a made at Google alternative to Let's Encrypt?

No, you are not. You have an illusion of control over your vehicle, and while you may have a measure of operability, the actual control of your vehicle is depending on the correct functioning of the software and hardware that manages the various controls in your car (gas pedal, steering wheel, brakes, etc), and the efficacy of your operation of the vehicle is entirely dependent on the driving conditions, including other drivers, weather, wildlife, etc.

In fairness, your operation of the vehicle has a substantial impact on the outcome of operating the vehicle, the the decision loop that your brain implements while driving is largely incapable of effectively processing and executing on the volume of information and variables that are in play in the circumstances that lead to high speed collisions.

Anecdotally you might feel in control, but it is probably worth noting that most people, drunk or sober, tired on fully awake, fully alert or texting, felt like they were in control when they were suddenly the cause of, or involved in a collision.

Then that recruiter should schedule themselves for a rectal occipital extraction :)

Nah, self driving electric vehicles with 6 seats operating on an UberPOOL model will dominate, and it wouldn't be surprising to see the UberPOOL model be extended to a subscription service as well where you simply pay a commit for the service level each month, get an included number of trips, and a further discounted on trips over that number.

Having the commit will make it maore feasible to fund vehicles that are intended for a specific area, and the pool model allows Uber to recover margin during pricing surges and users who don't want to pay the commit (after all, the discount on the fare would only apply to the portion of the pool fare ascribed to the subscribed to the passenger).

They don't need to be cheaper, they need to deliver better service.

Depending on the city, better might be faster, more available, less racist, less intense experience, cleaner, etc, etc, etc.

They don't need to be cheaper in most places, at least not yet.

Wait, are you talking about browsers or AV now :D

Yep, and that sure is nice if you are living in a country or region that has fast, cheap data.

I don't buy into enough of the eco system, but do Apple devices sharing an Apple ID to sync over LAN/WLAN instead of hitting icloud?

Yeah buddy, I don't know where you live, but I grew up in northern Manitoba, lived in Winnipeg, and in other parts of rural southern Manitoba. I have family throughout Alberta and Saskatchewan, and on the east coast. They have been following, promoting and loving Trumps message. If you don't think Trumps message resonated with blue collar folks in Canada, you better break out your filter bubble and take a look around, and think about what you want the political landscape of the country to look like after the next election.

It's really nice that you feel that way, but I hope to hell I don't need to use software you designed. "Look and feel" and "Aesthetics" are core components of usable computer software, and consistency is the way you enable users to consistently use your software.

Setting aside the purely utilitarian aspect of being required to use a piece of software to do a task or as part of a job, consistency increases efficiency by reducing the amount of time spent understanding the deviations from expectation in the user interface.

Right, so you can run the dns01 challenge on a separate service, up to and including running it in jenkins to automatically renew and push your certs, and kick the nginx server. I should document how my setup works and put it up somewhere...

Have a separate host that handles all of the renewals (e.g. dns01 challenge), then pushes the updated cert to your webserver and reloads the nginx (or whatever process is required for your webserver/proxy).

> Why not just make it open source?

It is.

> And let other people work on it and just cover 3 people managing this + architecture costs.

Um, Lets Encrypt, in the course of the last year has inadvertently become one of the largest issuers, and has become critical infrastructure for many of it's users who would suddenly have to pay for certificates, assuming they configured LE certs and Strict Transport Security. If LE was only 3 "managers" + cloud infrastructure, it wouldn't be reliable.

> You don't need 2.9 mil per year to process 60k certificate requests a day with system that is practically finished. What else is there to do which open source community could not do it itself?

The service isn't "practically finished", they need to continue to improve the service to reduce costs, improve the operations capabilities of the service as it grows, From LE: Staffing is our dominant cost. We currently have eight full time employees, plus two full time staff that are employed by other entities (Mozilla and EFF). This includes five operations/sysadmin staff, three software developers, one communications and fundraising person, and an executive director.

>Thousands of companies and developers use letsencrypt, a lot of potential man power to help if you ask me. You could easily cut costs 5-6 times. Or am i missing something here?

You are missing alot... this is not an open source project that anyone other than an existing CA can consume and hit the ground running. If any other major CA decided to consume Boulder, and offer it as a service, they could eat LE for lunch, but for anyone else, they need a massive investment in the logistics of becoming a CA.

Over and above that, LE is a team run on a shoestring, and yet they are building out infrastructure that is likely to be highly targeted by a broad range of attackers. Wether it's DoS, folks trying to get mis-issued certs, or a number of other objectives, that they are running and keeping the service up with that few people and that little money is an impressive feat.