Episode 5: Let's Encrypt? Let's Not.
SSL support is table stakes for any modern website. Browsers and search engines penalize un-encrypted websites to such an extent that SSL is necessary just to participate in the modern web.
The main road block to enabling SSL is acquiring an SSL certificate. In the past, the only option was to purchase a certificate from a sometimes-shady vendor for usurious prices. However, a free option called Let's Encrypt (https://letsencrypt.org/) has been available for several years now. In many cases it is a quick, easy option for configuring SSL.
Let's Encrypt is held up as a one-size-fits-all solution to everything SSL, but there are downsides. Situations differ between applications and LE is not always the best fit. Let’s Encrypt isn't a fit for Request Metrics. For now, we’ll buy a certificate like grumpy old men.