News for hackers. Stuff that matters.
Re:Let's Encrypt now holds 35% of the market by hosh on Monday November 20, 2017 @07:43PM (#15744643)
I'd be interested to see whether the total numbers of SSL sites has expanded because of LetsEncrypt.

I remember, one of the arguments that the Comodo CEO had on the forum was a rant about LetsEncrypt attacking their business model. While there were a lot of weird things in that rant, it does seem reasonable that a free service will erode the paid, commercial offering. So I would be curious if Letsencrypt is enabling people who otherwise would not have gotten an SSL cert, as well as the extent Letsencrypt is taking away customers.

I would also be curious to see what happens when wildcard SSL certs are launched.

Re:Let's Encrypt now holds 35% of the market by schoen on Monday November 20, 2017 @07:59PM (#15744721)
https://www.wired.com/2016/04/scheme-encrypt-entire-web-actu...

> And because 85 percent of those sites never had HTTPS before, it's already significantly boosted the total fraction of sites that are encrypted on the web as a whole. Based on numbers Mozilla gathers from Firefox users, encrypted sites now account for more than 42 percent of page visits, compared with 38.5 percent just before Let's Encrypt launched. And Aas says that number is still growing at close to one percent a month.

(I work on Let's Encrypt.)

Re:Let's Encrypt now holds 35% of the market by chias on Monday November 20, 2017 @08:05PM (#15744756)
Let's Encrypt has been of enormous service to me. It's not just about saving money -- it's about changing my perspective and expectations to "encrypted by default".

Thank you so much.

Re:Let's Encrypt now holds 35% of the market by berbec on Monday November 20, 2017 @08:08PM (#15744774)
This is something that is going to save a company I work for thousands annually. Extended Validation certificates for dozens of domains and subdomains. Now we just plug certbot into crontab and forget about it, forever!

Thank you for all the work you do. It is a great service you have given the world at large.

Re:Let's Encrypt now holds 35% of the market by schoen on Monday November 20, 2017 @08:14PM (#15744802)
By the way, the Let's Encrypt certificates are Domain Validation (DV) certificates rather than EV. Hope that's still OK for your application!
Re:Let's Encrypt now holds 35% of the market by berbec on Monday November 20, 2017 @09:32PM (#15745093)
We don't do any sort of major ecommerce and I have never drank the EV Kool-aid. It's the same encryption either way, just EV has an extra CA "stamp of approval". Considering how much I trust your average CA[1], i.e. not at all[2]...

1: https://www.infoworld.com/article/2623829/authentication/wea... 2: https://www.pcworld.com/article/249242/verisign_hacked_what_...

Re:Let's Encrypt now holds 35% of the market by giobox on Monday November 20, 2017 @08:14PM (#15744804)
You can still donate! Indeed I would encourage any commercial enterprise that makes savings this way to contribute something back at least.
Re:Let's Encrypt now holds 35% of the market by schoen on Monday November 20, 2017 @08:18PM (#15744819)
Thanks for the suggestion -- people can donate to support Let's Encrypt at https://letsencrypt.org/donate/.
Re:Let's Encrypt now holds 35% of the market by CydeWeys on Monday November 20, 2017 @08:00PM (#15744728)
You're a vital part of something my team is working on. Thanks for all your work.

Context: https://security.googleblog.com/2017/09/broadening-hsts-to-s...

Re:Let's Encrypt now holds 35% of the market by 0xfeba on Monday November 20, 2017 @08:27PM (#15744852)
Thanks for your work.
Re:Let's Encrypt now holds 35% of the market by foxhop on Monday November 20, 2017 @07:59PM (#15744722)
I hope it isn't profitable to sell signed certificates anymore. That is something that was bound to die. Long live the commons and public the domain.
Re:Let's Encrypt now holds 35% of the market by hosh on Tuesday November 21, 2017 @11:30AM (#15749036)
At least with DV certs. Having worked at a legaltech company for a couple years with lawyers, I've gain some appreciation for the role of governance. I can still see EV certs having a place in this ecosystem.

DV certs though ... largely felt like a scam to me, back when I learned how they work in the early days of the web.

Re:Let's Encrypt now holds 35% of the market by chias on Monday November 20, 2017 @08:02PM (#15744738)
> So I would be curious if Letsencrypt is enabling people who otherwise would not have gotten an SSL cert

Since Lets Encrypt, every last thing I put on the Internet leverages SSL. Prior to Lets Encrypt, I had purchased a single SSL cert, ever, because I don't have the money to throw at every little thing I like to create and play with.

Admittedly the plural of "anecdote" is not "data", but assuming I'm not special, my suspicion is "very much yes".

Re:Let's Encrypt now holds 35% of the market by twothamendment on Tuesday November 21, 2017 @12:01AM (#15745672)
> So I would be curious if Letsencrypt is enabling people who otherwise would not have gotten an SSL cert, as well as the extent Letsencrypt is taking away customers.

For my personal stuff, it is both. I paid for a single cert on my little server, but it hosted a handful of domains. It wasn't practical to secure the rest with only a single IP or to expensive to pile them all on a single cert. Let's Encrypt replaced one paid cert and secured 5 other domains that I otherwise wouldn't have.

This bled into work where we replaced all paid certs(except wildcards, coming soon) and secured hundreds of domains were not before.

Re:Let's Encrypt now holds 35% of the market by systematical on Monday November 20, 2017 @08:35PM (#15744884)
For me, I would never have bothered securing my personal site and small project sites with SSL. With Lets Encrypt they are all SSL now. I assume many devs with side sites are doing the same, but that may be just a drop in the bucket.
Re:Let's Encrypt now holds 35% of the market by giobox on Monday November 20, 2017 @08:12PM (#15744786)
I'd be shocked if it hasn't. The announcement from Google a year or so ago that sites not using SSL would suffer a small but undefined down-ranking in search results I think also really helped drive adoption too, and doubtless drove some into the arms of LetsEncrypt and their free certificates.
Re:Let's Encrypt now holds 35% of the market by aidenn0 on Monday November 20, 2017 @10:37PM (#15745328)
I switched from self-signed to LE for all of my personal sites. I had gotten some other free SSL cert provider up and running for one site, but it was a lot of steps; I would probably have paid $5 per year or so over free for something as convenient as LE, were LE not free.