Return Styles: Pseud0ch, Terminal, Valhalla, NES, Geocities, Blue Moon. Entire thread

Have you gotten your Let's Encrypt certificate yet?

Name: Anonymous 2015-12-28 19:10

Let's Encrypt offers free signed certificates that will work in major browsers, and will liberate us from the CAfia and the fundamental conflict between having everyone be secure and squeezing money out of the process as a middleman.

Hopefully this is only a stopgap until we move to something more flexible, that would limit the severity of compromises and allow actual delisting of misbehaving CAs instead of a slap on the wrist.

Name: Anonymous 2015-12-29 11:20

>>5
If you look at it that way, sure.
But trust and risk isn't just subject to chance in the real world. If the authority compromised is in the same jurisdiction as I am I could take legal action more easily and Govt agencies from a different jurisdiction have a harder time getting the authority to act compromised.
Further, you shouldn't attribute risk for any CA to be compromised as a constant. The risk is more closely related to the number of people involved and their motivations. One CA being trusted by more people would require more people to operate. But different CAs operated by a similar number of people total might have motivation to remain trustworthy out of competition, not just because the law.

Newer Posts
Don't change these.
Name: Email:
Entire Thread Thread List