Re: Let's Encrypt makes certs for 30% of web domains
by buboard on Friday September 06, 2019 @06:38PM
(#20900505)
indeed I misread it. you don't provide certs for the governments of those countries (still a limitation tbh). I got that from this post of one of your employees
https://community.letsencrypt.org/t/certificates-for-us-sanc...
Re: Let's Encrypt makes certs for 30% of web domains
by henryfjordan on Friday September 06, 2019 @04:31PM
(#20899602)
How do you know if someone is on the list?
When I registered my domain I got WHOIS protection and then LE just made sure I owned the domain. There was no asking about who I am or where I reside or what lists I might be on.
Re: Let's Encrypt makes certs for 30% of web domains
by jaas on Friday September 06, 2019 @04:43PM
(#20899713)
You can search the list here:
https://www.treasury.gov/resource-center/sanctions/sdn-list/...
Some entries have specific domains associated with them, but we are obligated to not serve any domain directly associated with (i.e. controlled by) an SDN entity, not just those listed.
If we become aware that we may be serving an entity on the SDN list (often via someone emailing us) we have to conduct an investigation which may result in termination of service.
Re: Let's Encrypt makes certs for 30% of web domains
by auslander on Saturday September 07, 2019 @02:54AM
(#20902216)
> We comply with U.S. sanctions
What are good non-US CAs?
Re: Let's Encrypt makes certs for 30% of web domains
by falcongod082 on Friday September 06, 2019 @11:12PM
(#20901553)
Well that's interesting, so these are political certs?
Re: Let's Encrypt makes certs for 30% of web domains
by IfOnlyYouKnew on Saturday September 07, 2019 @05:48AM
(#20902814)
no, they are legal certs.
We comply with U.S. sanctions by not issuing to entities on the SDN list, but that doesn't prevent us from serving the vast majority of people in those countries.