News for hackers. Stuff that matters.

A comment on Another free CA as an alternative to Let's Encrypt. Parent comment

Re:Another free CA as an alternative to Let's Encrypt by calcifer on Monday November 23, 2020 @07:56PM (#25193956)
> Is ZeroSSL trusted by old Android devices?

Yes. The intermediate certificate has been included since Android 6.0 [1] and the root expires in 2038 [2].

[1] https://android.googlesource.com/platform/system/ca-certific...

[2] https://crt.sh/?id=1199354

[ Parent | on HN ]
Re:Another free CA as an alternative to Let's Encrypt by gregoriol on Tuesday November 24, 2020 @07:35AM (#25197861)
Android 6.0+ is not that much better than future Let's Encrypt's Android 7.1+

It seems that there is no real alternative... Let's Encrypt's move is going to obsolete a huge lot of devices :-/

[ Parent | on HN ]
Re:Another free CA as an alternative to Let's Encrypt by calcifer on Tuesday November 24, 2020 @01:19PM (#25201250)
> Android 6.0+ is not that much better

That doesn't matter, the root that signed the intermediate cert was created in 2010 [1] which means it's usable for Android>=2.2.

[1] https://crt.sh/?id=1199354

[ Parent | on HN ]