News for hackers. Stuff that matters.

A comment on The future of Nginx: Getting back to our open source roots. Parent comment

Re:The future of Nginx: Getting back to our open source roots by vladvasiliu on Wednesday August 24, 2022 @03:47AM (#32576073)
> reliable CAs other than Let's Encrypt that have an API

Would you care to give an example or two?

[ Parent | on HN ]
Re:The future of Nginx: Getting back to our open source roots by TonyTrapp on Wednesday August 24, 2022 @04:45AM (#32576581)
Let's Encrypt's ACME protocol has been adopted by ZeroSSL, Buypass and ssl.com to offer free 90-day certificates.
[ Parent | on HN ]
Re:The future of Nginx: Getting back to our open source roots by 1letterunixname on Thursday September 01, 2022 @01:34AM (#32672392)
Free CAs are prone to fraud and abuse because they have no innate funding model and there's no barrier to anyone issuing a cert to any particular domain while attempting to circumvent domain authentication.
[ Parent | on HN ]
Re:The future of Nginx: Getting back to our open source roots by TonyTrapp on Sunday September 04, 2022 @06:24PM (#32718315)
> there's no barrier to anyone issuing a cert to any particular domain while attempting to circumvent domain authentication.

Let's Encrypt has a much better track record at preventing people from issuing certs for random domains compared to many other commercial entities.

[ Parent | on HN ]