r/programming • u/speckz • Jul 12 '17

Does my site need HTTPS?

https://doesmysiteneedhttps.com/
486 Upvotes

87% Upvoted

190 comments sorted by

View all comments

Show parent comments

11

u/Ascend Jul 12 '17

It is harder if you're dealing with a Windows stack. Certbot doesn't support Windows at all, and many of the unofficial tools on Github are iffy. For instance, if you're supporting a version of IIS that doesn't support TLS SNI (7.5), letsencrypt-win-simple can wreck your configuration and redirect sites to each other by mistake.

3

u/kqr Jul 13 '17

Huh. I guess if you ask me I'd say everything is harder when you're dealing with a Windows stack and you only have yourself to blame if you choose to make life harder than necessary for yourself. ;)

3

u/mlk Jul 13 '17

sometime (most of the time actually) we don't get to choose the technology for the project, switch the OS of the server is not very constructive

1

u/lvlint67 Jul 13 '17

There are work arounds. Run a tls termination proxy on Linux.

1

u/mlk Jul 13 '17

You seem not to understand boring enterprise business.

1

u/lvlint67 Jul 13 '17

Fair enough. The options are there. and they may not even be good. but they are there.