Let's Encrypt makes certs for 30% of web domains

Re: Let's Encrypt makes certs for 30% of web domains by henryfjordan on Friday September 06, 2019 @04:45PM (#20899732)

How are you going to trust that decentralized org? Is it just voting? Can we all vote to revoke anyone's cert at any time for no reason? What happens when someone performs a 51% attack and takes over google.com's cert?

CAs exist solely because you CAN trust them, otherwise what's the point? We'd just have every site self-sign and let the users choose who to trust.

[ Parent | on HN ]

Re: Let's Encrypt makes certs for 30% of web domains by JohnFen on Friday September 06, 2019 @06:43PM (#20900534)

> CAs exist solely because you CAN trust them, otherwise what's the point?

That's the idea, but in practice, I don't really trust the vast majority of them.

[ Parent | on HN ]

Re: Let's Encrypt makes certs for 30% of web domains by dheera on Friday September 06, 2019 @08:29PM (#20901021)

My thinking was that it would be similar to a GPG trust network.

[ Parent | on HN ]

Re: Let's Encrypt makes certs for 30% of web domains by tatersolid on Monday September 09, 2019 @10:13PM (#20924538)

We’ve seen nearly 30 years of web-of-trust failure and yet you still think it’s a workable idea?

[ Parent | on HN ]