4 ms·

I'm a layman when it comes to secure websites and certificates. I remember reading that the "free https" provided by Cloudflare meant Cloudflare owned the priva

I'm a layman when it comes to secure websites and certificates. I remember reading that the "free https" provided by Cloudflare meant Cloudflare owned the private keys to something and was able to see all traffic. Is that the case with Let's Encrypt? Because if it is I don't see as an improvement at all.

atonse 11y ago
No, you never send your private key to anyone, with any HTTPS certificate generating scheme. All they do is sign your public key.
- ge0rg 11y ago
  At least you should not. StartSSL (and probably other CAs) has a prominent feature to create your key pair for you, which you need to skip to use a signing request. Always use the latter!
pfg 11y ago
You create your own private key (or rather, the client does that for you, if you use the official one) and send them a Certificate Signing Request (CSR) which only includes your public key. The private key stays on your server.
ianlevesque 11y ago
It is not the case with letsencrypt
deleted 11y ago
[deleted]