4 ms·
> * Public, non-sensitive content that you need to distribute or broadcast using CDNs (such as Amazon's), who may charge you hundreds or thousands of dollars to
by finnn 11y ago
> * Public, non-sensitive content that you need to distribute or broadcast using CDNs (such as Amazon's), who may charge you hundreds or thousands of dollars to install a custom server certificate if you want to use your own domain
If TLS is mandatory, the price of this will have to go down
> * Servers with limited CPU power and which are not serving sensitive content (e.g. embedded devices, Raspberry Pis, Arduinos et al.)
I've served TLS off embedded devices like these no problem
>* Getting a website up for $0.00 without paying some troll corporation to "validate" your certificate
Certificates are free (WoSign, StartCom, LetsEncrypt)
>* Getting a website up to distribute information without revealing YOUR identity
None of the free CAs validate anything beyond your email address (StartCom demands an address, but they don't seem to do much beyond validate that it's a valid address). DV certs are not to validate identity, just that you are the domain owner
- ori_b 11y ago> I've served TLS off embedded devices like these no problem I doubt it -- Raspberry Pi is easy, but even HTTP on an Arduino would be a stretch.
- daurnimator 11y ago> > * Servers with limited CPU power and which are not serving sensitive content (e.g. embedded devices, Raspberry Pis, Arduinos et al.) > I've served TLS off embedded devices like these no problem On e.g. a esp8266 you can only have a single TLS connection at a time. While you can have hundreds of normal TCP sessions. > Certificates are free (WoSign, StartCom, LetsEncrypt) - WoSign doesn't work on mildy old devices - StartCom certs are expensive to revoke - LetsEncrypt doesn't exist yet
- nly 11y agoWhy dont WoSign certs work on old devices? Their intermediate is cross-signed by Startcom
- deftnerd 11y agoWoSign stopped doing free SSL in the last day or two, FYI.
- finnn 11y agohttps://buy.wosign.com/free/ https://buy.wosign.com/free/ looks like they're still doing it... haven't actually tried to get a cert signed
- nly 11y agoLooks like it's just a weaker offering now: only for a year and only 1 domain, no altnames[0]! The demise of this free option was predicted/discussed just 9 days ago in another HN thread[1] [0] https://buy.wosign.com/free/ https://buy.wosign.com/free/ [1] https://news.ycombinator.com/item?id=10185174 https://news.ycombinator.com/item?id=10185174