News for hackers. Stuff that matters.
Re:10 Years of Let's Encrypt by ptsd_isv on Tuesday December 09, 2025 @06:40PM (#46212234)
GP: At least on business plans this is incorrect, it defaults to (last time I checked) accepting any SSL certificate including self signed from edge to origin and it’s a low friction option to enforce either valid or provided CA/PubKey certs for the same path.

Parent: those innocuous cat photos are fine in the current political climate… “First they came for the cat pic viewers, but I did not speak up…”

Re:10 Years of Let's Encrypt by nottorp on Wednesday December 10, 2025 @01:52AM (#46214866)
Wrong metaphor though?

How does SSL on a -ing public site protect you from being arrested by miniluv?

It’s public, you want everyone to see the cat photos, that’s why you set up the site. On the contrary, SSL certs mean another party through which miniluv can track you. They prove or are supposed to prove identity not hide it.

Re:10 Years of Let's Encrypt by ptsd_isv on Wednesday December 10, 2025 @07:43AM (#46217067)
Sorry that wasn’t particularly clear, I was taking more about the general advantageous nature of normalising encryption.

WRT to another party to track you, one of the benefits of LE is that you only need to provide proof of domain ownership (eg dns txt) so the only tie back to you is whatever information you give to the registrar that you have to provide anyway.