3 ms·
The article starts: Let’s Encrypt is a revolutionary new certificate authority ... and in my opinion fails at that precise point. I think that SSL/TLS itself
by gerdesj 8y ago
The article starts: Let’s Encrypt is a revolutionary new certificate authority
... and in my opinion fails at that precise point.
I think that SSL/TLS itself is the correct starting point and not a particular implementation. The article could have been titled "Using TLS for internal servers". The LE implementation could have been one of a few.
Don't forget that you can manage your own Certificate Authority lists and really ought to do so if you actually give a shit about IT security. Abrogating your responsibility to MS, Apple, Mozilla, Google etc is way too easy, dangerous and probably immoral.