3 ms·
I think there are 2 factors. 1) Do LE do a good job of ensuring that they only grant certificates to domain holders. 2) Do they do a good job of representing wh
by sleepychu 10y ago
I think there are 2 factors.
1) Do LE do a good job of ensuring that they only grant certificates to domain holders.
2) Do they do a good job of representing what they're signing (authentication versus identification http://imgur.com/a/fAaYH http://imgur.com/a/fAaYH)
The certificate is a kind of "encryption only" certificate, it's treated as a second class citizen (you might get a grey lock for example) so it's encrypting the communication but it's not very useful for convincing you that you're talking to your bank when you aren't.
Of course if LE don't do a good job of (1) then we're f*ed because they'll issue certificates to bad actors and LE have a hard job because now they're trusted they're a good target for DNS cache poisoning etc.