4 ms·
Serious question: Was Francisco Partners unaware that the paid CA business model is going down the crapper thanks to LetsEncrypt? Props to Comodo though for ha
by joecool1029 9y ago
Serious question: Was Francisco Partners unaware that the paid CA business model is going down the crapper thanks to LetsEncrypt?
Props to Comodo though for having the foresight to exit while there was still value.
- g09980 9y agoIs it really [going down the drain] though? I'd imagine there will be infinite ways to create costly enterpris-y offerings, be that via additional important-looking seals, SLAs, EV, or something else. Or Postgres+friends would've destroyed Oracle ages ago.
- gtsteve 9y agoFurthermore, I don't believe there is a LetsEncrypt equivalent for code signing.
- jacobush 9y agoAlso harder to implement. With letsencrypt you prove you control the domain and the DNS. How do you prove you control software?
- nailer 9y agoIt's the same process as EV - verify the public key is controlled by a real world legal entity. Validation process depends on the entity type, but usually a combination of government and private business registrars, and verification phone calls. Sometimes ID inspection for sole traders (since in their case the legal entity is a person).
- jacobush 9y agoYes, but this does not lend itself to automation, hence free as letsencrypt does.