2 ms·
Let's Encrypt certificates quality is better: Grade A [1] versus Grade A- for StartSSL [2]. I personally like who's behind it. AFAIK, Let's Encrypt started wit
by deepsun 11y ago
Let's Encrypt certificates quality is better: Grade A [1] versus Grade A- for StartSSL [2].
I personally like who's behind it. AFAIK, Let's Encrypt started with EFF sponsorship, later came Google, Mozilla, Facebook, now Cisco, Akamai, HP.
Probably there are other differences, would be glad to know.
[1] https://www.ssllabs.com/ssltest/analyze.html?d=helloworld.letsencrypt.org https://www.ssllabs.com/ssltest/analyze.html?d=helloworld.le...
[2] https://www.ssllabs.com/ssltest/analyze.html?d=www.startssl.com https://www.ssllabs.com/ssltest/analyze.html?d=www.startssl....
- pfg 11y agoThat grade is actually mostly about your TLS configuration (available cipher suites, etc.), and not about the certificate. Aside from some major no-goes (like SHA-1 certificates), TLS security is about server configuration; certificates are relatively straightforward in that respect. It's true that they embrace a lot of best practices, like short certificate lifetimes, automation, logging all certificates to CT log servers (which StartSSL started doing quite recently as well), etc. The client also helps with securing your TLS configuration, among other things.