Interesting but will there be a way to generate the certs and download them myself versus running an application as root on my servers? I would much prefer not to run their application as root on my servers :)
Agree. I love what they're doing but it seems crazy that installing a new daemon and running it as root is being advertised as a key part of the solution. I get that they're trying to make it super simple for the hobbyist at home with a LAMP VPS but it feels like this should be an alternative to a simple, composable command line tool that's more of the unix philosophy and less invasive.
The good thing is the ACME protocol looks pretty straightforward so I'm sure someone will write that tool, even if Lets Encrypt themselves aren't interested in providing it.
Alternatively, it could have a non-sudo mode that would give you the certs and configs in a directory and tell you where to copy them (or generate a simple, five-line bash script to copy them).
