Re:Microsoft silently adds Amazon root certificates to its CTL
by evook on Friday January 22, 2016 @04:00AM
(#10951613)
That's probably still better then tolerating economic espionage. But since this very dreaming, I personally still hope for the new Audit of CAcert end of this month. The CAcert root certificate would be a reason for me to use letsencrypt only as a fallback for HPKP.
[ Parent
| on HN ]
Re:Microsoft silently adds Amazon root certificates to its CTL
by e12e on Friday January 22, 2016 @08:25AM
(#10952525)
Didn't realize they were still moving forward with that (despite using CAcerts myself). Thanks for the heads up. I suppose that's as good an excuse as any to hold off a bit on moving to letsencrypt (To be clear, with CAcert not being in any of the default cert-stores, I wouldn't recommend avoiding letsencrypt in favour of CAcert to the casual user -- but I don't (currently) need a widely trusted anchor for what I use CAcert for. Even if it would've been nice if it was widely trusted out of the box).