This ticket asks FESCo to consider whether the certbot package should be granted a permanent exception under the Updates Policy.

The certbot package is a Python package published by EFF to manage free SSL certs mostly from Let's Encrypt but others are supported as well. It has integrations for various DNS providers as well as Apache and Nginx web servers.

No package depends on the certbot package.

This request is mostly so EPEL can inherit the exception as the short lifecycle of Fedora makes it less relevant to Fedora specifically. Given EPEL's long life cycle, many things can change cert-wise over a 10-year period along with APIs of the DNS providers with which certbot integrates. This leads to folks being unable to get the most ideal (secure) certs and/or completely broken integrations which can break or otherwise leave websites vulnerable if server admins don't take action.

certbot does have breaking changes in the traditional sense of changed functionality, it generally does not require user intervention and the value of updating far outweighs the very minute chance of an obscure breakage from said update.