3 ms·

> Not paying Verisign your rent? Would have been a fair statement a couple of years ago, but we live in a day when you can get free annual certs manually (Star

• cookiecaper 10y ago
  The StartSSL CA is in the process of being blacklisted by major browser vendors because they issued a certificate for github.com to someone who clearly does not run github.com. [0] LetsEncrypt just barely left beta (also this summer) and I'll admit that I haven't investigated it thoroughly, but it appears that some widespread devices are still incompatible (also consider the versions that accept LetsEncrypt; some of those are fairly recent, like CM 10). [1] While some noble souls like LetsEncrypt have sought to remedy this rent-seeking behavior, it remains the fact that in most cases, a traditional CA is going to be required for a couple more years at least. [0]https://www.schrauger.com/the-story-of-how-wosign-gave-me-an-ssl-certificate-for-github-com https://www.schrauger.com/the-story-of-how-wosign-gave-me-an... [1]https://letsencrypt.org/docs/certificate-compatibility/ https://letsencrypt.org/docs/certificate-compatibility/