4 ms·
Yep, letsencrypt handles peer to peer encryption not authentication which is supposed to be the point of codesigning. Not that codesigning helps that much eithe
by jsmeaton 7y ago
Yep, letsencrypt handles peer to peer encryption not authentication which is supposed to be the point of codesigning. Not that codesigning helps that much either - you still get big scary prompts on Windows after signing until you generate enough downloads to gain further trust. It’s all a mess.
- atanasi 7y agoCertificates are precisely for authentication, but the simplest form employed by automatic systems like letsencrypt only tries to verify domain control. It does not bind the certificate to any legal identity, unlike stronger forms of certificates.