https://letsencrypt.org/2025/01/22/ending-expiration-emails/<p>Quote:<p><i>> Providing expiration notifications costs Let’s Encrypt tens of thousands of dollars per year, money that we believe can be better spent on other aspects of our infrastructure.</i><p>I'm trying to come up with a scenario in my head where sending, let's say, 2M emails per month at scale with an essentially fully automated service infrastructure can cost more than a grand per month. I'm failing to do so.<p>My calc: SES pricing is around $0.1 per 1,000 emails. LE has around 550M active certificates. Let's say 5% receive an expiration notice (I never got one?), that's just over 2M emails per month on average.<p>How can that be? Am I missing something?
Let's Encrypt generates ~7M certs/day[0], a cert is only good for 90 days (~a quarter) so let's use 90 days as a window.<p><pre><code> 7M/day * 90 = 620M/quarter
</code></pre>
So that's ~2.5B certs issued per year (knowing that these are often reissues, but you get the notification each time you approach the expiry).<p>Assuming <i>only one message</i> (not what happens, you get more than one notice.. especially if you let it expire, you get at least two follow up messages) per cert:<p><pre><code> 2.5B * $.1/1000 = $250K/yr
</code></pre>
Some users don't provide email addresses, some don't provide valid ones (doesn't mean their infra doesn't have to try to contact, at least for the first expiry), some use a renewal script that renews before the email (9 days prior to expiry I think?), some don't care to renew (I'm sure LE is used in throw away cases where they don't care to renew, but the 3+ emails were still dutifully sent).<p>But for 1 email per issued cert it's > $20k/month to send these messages with SES pricing.<p>There's also the TLS validity halving (well.. 90 days -> 47 days) looming, which in some way helps with the revocation servers, but would also double their (former) email costs. And then there's future proposals that would half or ever quarter that lifetime again (once again multiplying their email costs). At some point LE would just be an Amazon SES support system (like DVD-Netflix was for postal services).<p>[0]: <a href="https://letsencrypt.org/stats/" rel="nofollow">https://letsencrypt.org/stats/</a>
You are only thinking of technology costs. What about Human cost to manage that email infrastructure ? Emails and their deliverability btw are always lot more work than you may think. I am not at all surprised that it costs them 10s and 1000s per year.
I maintained email servers as part of my job; mainly just getting inbound customer service emails, sending some auto-responses, and forwarding into a queue system. If I were working full time, I'd be getting at least $200k salary, probably ~ $300k employer cost with employer paid tax and insurance. Assuming the mail servers don't cost anything, $20k is ~ 6.6% of that, which is a little less than 11 hours a month. I could see mail taking that much time, especially if you look into reports of missing email. If you price in equipment, the hours available to tend the servers is even less.
Doing things right costs much more than doing things that are probably good enough.<p>Or to put it another way, on the back of a napkin expect the last 20% to cost 4x the first 80%. Or to put it another another way, 80% of Excel is not 80% of Excel if you get my point. Good luck.