4 ms·
Genuine question: Are the other smaller cert-issuing services going out of business? If not, what has been their response to LetsEncrypt? Not that all of them
by asenna 9y ago
Genuine question: Are the other smaller cert-issuing services going out of business? If not, what has been their response to LetsEncrypt?
Not that all of them should survive, there are a lot of crappy services that deserved this. But I'm just trying to place myself in their CEOs position and wondering how the game plan should be.
- wbl 9y agoGo upmarket and sell EV certs or codesigning certificates.
- catdog 9y agoThere are some niches left even for DV like wildcard certs or longer validity periods.
- collinmanderson 9y agoStartSSL effectively died, and I assume LetsEncrypt was part of the reason.
- duskwuff 9y agoNo... the real reason StartSSL died was because they were acquired by another CA, Wosign, which had a number of serious security and management issues. These issues led to both CAs being distrusted by all major browsers. https://wiki.mozilla.org/CA:WoSign_Issues https://wiki.mozilla.org/CA:WoSign_Issues
- collinmanderson 9y agoRight, but why did Eddy Nigg sell StartSSL to WoSign? My guess is Heartbleed made him re-consider whether he wanted to keep doing ssl/tls certs, and once Let's Encrypt came along he started looking for a way to get out of it.