Doesn't matter. TLS with vanilla PKI isn't a defence against the NSA, it's a defence against your CC number or password being pilfered by a dodgy hotspot operat

Doesn't matter. TLS with vanilla PKI isn't a defence against the NSA, it's a defence against your CC number or password being pilfered by a dodgy hotspot operator...or from your ISP injecting ads in to your webpages. Anyone who thinks LetsEncrypt is a backlash wrt the Snowden revelations is deluded. A race to the bottom for DV certs was as inevitable as mass online piracy was once the cost of broadband filesharing went to zero.