<story><title>2021.06.08 Certificate Lifetime Incident</title><url>https://community.letsencrypt.org/t/2021-06-08-certificate-lifetime-incident/153426</url></story><parent_chain><item><author>jaas</author><text>Head of Let&amp;#x27;s Encrypt here.&lt;p&gt;The question of whether or not revocation should happen has to be asked whenever a certificate compliance issue is being discussed, regardless of how serious the issue is. That is a normal part of the process of evaluating an incident thoroughly.&lt;p&gt;We do not plan to revoke any certificates as a result of this issue.&lt;p&gt;An aside - I love how informed many of the commenters here are, thanks to you all for helping to explain what&amp;#x27;s happening!</text></item></parent_chain><comment><author>jiggawatts</author><text>I love your work!&lt;p&gt;Any chance you could convince Microsoft to add Let&amp;#x27;s Encrypt as an &amp;quot;integrated&amp;quot; CA in Azure Key Vault? It&amp;#x27;s absolutely bonkers how much money I have to pay to get a certificate in 2021 for cloud services! E.g.: the App Service certificates are $70&amp;#x2F;year each or $300&amp;#x2F;year for a wildcard certificate. That&amp;#x27;s nuts. Reference: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;azure.microsoft.com&amp;#x2F;en-us&amp;#x2F;pricing&amp;#x2F;details&amp;#x2F;app-service&amp;#x2F;windows&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;azure.microsoft.com&amp;#x2F;en-us&amp;#x2F;pricing&amp;#x2F;details&amp;#x2F;app-servic...&lt;/a&gt;&lt;p&gt;I strongly suspect the reason Let&amp;#x27;s Encrypt isn&amp;#x27;t adopted more widely in cloud services is because there&amp;#x27;s &lt;i&gt;no margin on a free service&lt;/i&gt;. This is why Microsoft, AWS, and GCP all carefully pretend that there are no free options, and make sure that it&amp;#x27;s a difficult uphill battle to use Let&amp;#x27;s Encrypt.&lt;p&gt;E.g.: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;docs.microsoft.com&amp;#x2F;en-us&amp;#x2F;azure&amp;#x2F;key-vault&amp;#x2F;certificates&amp;#x2F;how-to-integrate-certificate-authority&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;docs.microsoft.com&amp;#x2F;en-us&amp;#x2F;azure&amp;#x2F;key-vault&amp;#x2F;certificate...&lt;/a&gt;&lt;p&gt;Notice how the document title is literally &amp;quot;Integrating Key Vault with DigiCert certificate authority&amp;quot;. Not &amp;quot;Certificate Authority&amp;quot;, it&amp;#x27;s the &amp;quot;&lt;i&gt;DigiCert&lt;/i&gt; certificate authority&amp;quot;. Apparently, HTTPS is now DigiCert&amp;#x27;s protocol, they&amp;#x27;re the gatekeepers, and you have to pay them money to use it.&lt;p&gt;It boils my blood that 1KB files of random numbers still cost money, and the trolls under the bridge are still taxing everyone for what is now essentially mandatory for all web sites.&lt;p&gt;If anyone here has a significant account with Azure, please apply some pressure to your Microsoft account manager next time you have coffee with them. This rent seeking for what should be free for everyone has to stop.</text></comment>
<story><title>2021.06.08 Certificate Lifetime Incident</title><url>https://community.letsencrypt.org/t/2021-06-08-certificate-lifetime-incident/153426</url></story><parent_chain><item><author>jaas</author><text>Head of Let&amp;#x27;s Encrypt here.&lt;p&gt;The question of whether or not revocation should happen has to be asked whenever a certificate compliance issue is being discussed, regardless of how serious the issue is. That is a normal part of the process of evaluating an incident thoroughly.&lt;p&gt;We do not plan to revoke any certificates as a result of this issue.&lt;p&gt;An aside - I love how informed many of the commenters here are, thanks to you all for helping to explain what&amp;#x27;s happening!</text></item></parent_chain><comment><author>sigzero</author><text>That you for the clarification and the letsencrypt service.</text></comment>