this post was submitted on 27 Oct 2026
1497 points (98.7% liked)
Programmer Humor
34135 readers
1570 users here now
Welcome to Programmer Humor!
This is a place where you can post jokes, memes, humor, etc. related to programming!
For sharing awful code theres also Programming Horror.
Rules
- Keep content in english
- No advertisements
- Posts must be related to programming or programmer topics
- If the mod doesn't find it funny, you're banned. Ha-ha!... For real: do not use the community for "statements". There are other places for such content. Keep it chill and funny.
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Just leaving their bare ass out there with no ssl, smh
It's only one ssl. How much could it possibly cost? 4 dollars?!
I the worst part is deciding which flavor to get
I like that the most expensive one is called "wildcard".
Sounds like it's gonna perform AMAZING feats of security some of the time and just not work at all at other times.
Kinda like the wild mage of encryption 😁
WILDCARD SECURITY
It blasts the hackers off the face of the earth with orbital lasers! killer robots sever their network connection! It's twirling a revolver on its finger while smoking three cigarettes!
And sometimes, that revolver goes off in your face, and it posts your private key on 4Chan.
Jesus... TIL
They can also be gotten for free through many providers, the biggest one in self-hosting is LetsEncrypt
Isn't TLS/SSL something at the server level and not the domain provider level?
You have to get a certificate from a provider which can verify you control the domain.
Once you've proved control you install the signed certificate with the secret private key on your server.
You can get certificates for free via Let's Encrypt and a bunch more CA's. It hasn't been expensive for ages, unless you want fancy corporate support.
Corporate support can be a big deal.
In a previous life, I routinely blocked anything from a free cloud host or cert provider. There was rarely a business justification for accessing a site or service hosted on DigitalOcean or signed by LetsEncrypt. Sure, get an SSL cert and host for your personal project - so I wasn't mad at the services - but it was a signal that the endpoint was not trustworthy beyond the TCP packets.
I suspect that AWS/GCP/Azure has made that much harder.
Yeah now let’s encrypt and other free cert providers are ubiquitous so it doesn’t make sense to block them. But you do need EV ssl for certain industries and markets like banking.
Imma flex my EV
I tried securing my ass, but my browser got stuck.