5 ms·

> You can purchase an SSL certificate through one of our web partners or a Certificate Authority. Read this article to learn more. Really? No mention of Lets E

> You can purchase an SSL certificate through one of our web partners or a Certificate Authority. Read this article to learn more. Really? No mention of Lets Encrypt? Does anyone still buy certificates nowadays, especially for dev sites?

rndgermandude 8y ago
They explicitly mention letsencrypt as a free provider when you click the "Read this article" link.
- amenod 8y ago
  It's not like they made any effort to make it visible, though. And "purchase" implies that the options they present are non-free. Which is interesting, I would expect Google to promote Lets Encrypt... Or do they assume devs already know about it?
  - icebraining 8y ago
    They probably don't want to cause ill will by being partial to a particular CA, even if they're supporting it.
henvic 8y ago
Of course they do. Let's Encrypt provides DV (Domain Validation). Not OV (Organization Validation). Obviously .dev is intended for software development and most domains there would probably be using DV only so this might not apply to it, though.
- kortilla 8y ago
  OV is useless. No consumers look at it. It’s just a sad attempt for CAs to trick people into paying for something they don’t need.
  - henvic 8y ago
    Do you even use Amazon or Internet banking? It might sound useless for those who doesn't know what it is. However, for those who does it is very useful and getting more useful. Browsers might (if not yet, coming soon to you) raise red flags if you try to use a website whose certificate was signed by a rogue CA that, according to DNS instructions, shouldn't be able to do so for that domain. Browsers might demand OV from high profile websites in theory. etc, etc, etc. Maybe we are
  - deleted 8y ago
    [deleted]
  - Aeolun 8y ago
    Seeing the organisation name next to the lock icon definitely gives me an extra layer of warm and fuzzy feelings. I’d say it has some value for those that can pay for it.
    - Ayesh 8y ago
      You are talking about EV certificates. OV-validated certificates require (the best case) the user to click on the padlock icon to reveal more information about the certificate.
lawnchair 8y ago
Not all certificates are created equal > Let’s Encrypt offers Domain Validation (DV) certificates. We do not offer Organization Validation (OV) or Extended Validation (EV) primarily because we cannot automate issuance for those types of certificates.
byuu 8y ago
I buy them. I don't like paying for them, but I want a certificate I know will just work for years without having to run certbot or one of its clones on my server. Well, that and LE didn't yet allow wildcard certs when I bought mine. They've already dropped their maximum validity from three to two years though, so I'll probably throw in the towel when they further reduce their validity to less than six months.
- jbverschoor 8y ago
  Well that's nice. But that mean you'll have to manually buy, upgrade install and test them. I have better things to do.
  - AnIdiotOnTheNet 8y ago
    Takes about 5 minutes of time. It really isn't a big deal.
    - r3bl 8y ago
      So does setting up Let's Encrypt + automating the renewal, and you don't have to spend a dollar in those 5 minutes.
    - srwx 8y ago
      5 minutes once forever is even less of a big deal.
- Kaspar0v 8y ago
  A certificate that last for years... That's exactly how you end up with a certificate that expired and no one realized. An automated process is a way more reliable.
  - byuu 8y ago
    Until the automated process breaks. I've encountered more "invalid certificate" warnings on Let's Encrypt sites than any others.

rndgermandude 8y ago

They explicitly mention letsencrypt as a free provider when you click the "Read this article" link.

amenod 8y ago
It's not like they made any effort to make it visible, though. And "purchase" implies that the options they present are non-free. Which is interesting, I would expect Google to promote Lets Encrypt... Or do they assume devs already know about it?
- icebraining 8y ago
  They probably don't want to cause ill will by being partial to a particular CA, even if they're supporting it.

henvic 8y ago

Of course they do. Let's Encrypt provides DV (Domain Validation). Not OV (Organization Validation). Obviously .dev is intended for software development and most domains there would probably be using DV only so this might not apply to it, though.

kortilla 8y ago
OV is useless. No consumers look at it. It’s just a sad attempt for CAs to trick people into paying for something they don’t need.
- henvic 8y ago
  Do you even use Amazon or Internet banking? It might sound useless for those who doesn't know what it is. However, for those who does it is very useful and getting more useful. Browsers might (if not yet, coming soon to you) raise red flags if you try to use a website whose certificate was signed by a rogue CA that, according to DNS instructions, shouldn't be able to do so for that domain. Browsers might demand OV from high profile websites in theory. etc, etc, etc. Maybe we are
- deleted 8y ago
  [deleted]
- Aeolun 8y ago
  Seeing the organisation name next to the lock icon definitely gives me an extra layer of warm and fuzzy feelings. I’d say it has some value for those that can pay for it.
  - Ayesh 8y ago
    You are talking about EV certificates. OV-validated certificates require (the best case) the user to click on the padlock icon to reveal more information about the certificate.

lawnchair 8y ago

Not all certificates are created equal > Let’s Encrypt offers Domain Validation (DV) certificates. We do not offer Organization Validation (OV) or Extended Validation (EV) primarily because we cannot automate issuance for those types of certificates.

byuu 8y ago

I buy them. I don't like paying for them, but I want a certificate I know will just work for years without having to run certbot or one of its clones on my server. Well, that and LE didn't yet allow wildcard certs when I bought mine. They've already dropped their maximum validity from three to two years though, so I'll probably throw in the towel when they further reduce their validity to less than six months.

jbverschoor 8y ago
Well that's nice. But that mean you'll have to manually buy, upgrade install and test them. I have better things to do.
- AnIdiotOnTheNet 8y ago
  Takes about 5 minutes of time. It really isn't a big deal.
  - r3bl 8y ago
    So does setting up Let's Encrypt + automating the renewal, and you don't have to spend a dollar in those 5 minutes.
  - srwx 8y ago
    5 minutes once forever is even less of a big deal.
Kaspar0v 8y ago
A certificate that last for years... That's exactly how you end up with a certificate that expired and no one realized. An automated process is a way more reliable.
- byuu 8y ago
  Until the automated process breaks. I've encountered more "invalid certificate" warnings on Let's Encrypt sites than any others.