Re:Running the Let's Encrypt Beta
by pdkl95 on Tuesday October 27, 2015 @08:42AM
(#10457588)
> There are free certs already.
Not anywhere that I can find. Let's Encrypt is very important or full participation on the web isn't available to the poor. The internet should be fully usable by anybody with an IP. Adding the cost of a PKI cert is a barrier to entry.
> Startssl
...won't give me a certificate. (they have in the past, I don't know why they changed their mind)
This assumption that a single private business providing free certificates (but mind the fine print) is somehow an a solution to the SSL problem is poor engineering[1]. Unfortunately, this kind of
attitude has become very common in recent years.
[1] You should always have a second source for anything critical. A design that is dependent on a single point of failure that you don't control is a design that is guaranteed to fail unpredictably.
Not anywhere that I can find. Let's Encrypt is very important or full participation on the web isn't available to the poor. The internet should be fully usable by anybody with an IP. Adding the cost of a PKI cert is a barrier to entry.
> Startssl
...won't give me a certificate. (they have in the past, I don't know why they changed their mind)
This assumption that a single private business providing free certificates (but mind the fine print) is somehow an a solution to the SSL problem is poor engineering[1]. Unfortunately, this kind of attitude has become very common in recent years.
[1] You should always have a second source for anything critical. A design that is dependent on a single point of failure that you don't control is a design that is guaranteed to fail unpredictably.