News for hackers. Stuff that matters.
Re:Another free CA as an alternative to Let's Encrypt by da_big_ghey on Monday November 23, 2020 @02:05PM (#25190351)
Good to know, and I'm glad there's an alternative to Let's Encrypt, just in case. Is ZeroSSL trusted by old Android devices? If so, that might be a work-around for Let's Encrypt's cross-signing from IdenTrust expiring.
Re:Another free CA as an alternative to Let's Encrypt by mholt on Monday November 23, 2020 @02:07PM (#25190376)
Yes as far as I know; their Sectigo/Comodo root is older.

But, you can still use Let's Encrypt with old Android devices until the later part of 2021 using the alternate chain: https://letsencrypt.org/2020/11/06/own-two-feet.html (As a point of reference, Caddy supports configuring this alternate chain.)

Re:Another free CA as an alternative to Let's Encrypt by stephenr on Monday November 23, 2020 @03:28PM (#25191361)
If zerossl is reselling/a subsidiary of sectigo, that’s enough reason to never use this.

Sectigo is the new name for Comodo. The same bunch of pricks who tried to trademark “Let’s Encrypt”.

Other players in the acme cert “business” is great. Renaming a slime ball name and carrying on like nothing happened is not ok.

Re:Another free CA as an alternative to Let's Encrypt by pbronez on Monday November 23, 2020 @03:53PM (#25191695)
"If you can't beat 'em, join 'em"
Re:Another free CA as an alternative to Let's Encrypt by calcifer on Monday November 23, 2020 @07:56PM (#25193956)
> Is ZeroSSL trusted by old Android devices?

Yes. The intermediate certificate has been included since Android 6.0 [1] and the root expires in 2038 [2].

[1] https://android.googlesource.com/platform/system/ca-certific...

[2] https://crt.sh/?id=1199354

Re:Another free CA as an alternative to Let's Encrypt by gregoriol on Tuesday November 24, 2020 @07:35AM (#25197861)
Android 6.0+ is not that much better than future Let's Encrypt's Android 7.1+

It seems that there is no real alternative... Let's Encrypt's move is going to obsolete a huge lot of devices :-/

Re:Another free CA as an alternative to Let's Encrypt by calcifer on Tuesday November 24, 2020 @01:19PM (#25201250)
> Android 6.0+ is not that much better

That doesn't matter, the root that signed the intermediate cert was created in 2010 [1] which means it's usable for Android>=2.2.

[1] https://crt.sh/?id=1199354