3 ms·
The acme protocol is well defined , and code is open source you could always implement your own service. Let’s encrypt only real hold is their root certificate
by manquer 6y ago
The acme protocol is well defined , and code is open source you could always implement your own service.
Let’s encrypt only real hold is their root certificate is now in many trust stores , if you control both sides self signed certificates are perfectly fine you don’t need a CA at all
- jrockway 6y agoI think he's talking about the temptation to set up a pin to their root. That can break just as easily as any other pin, and of course you won't be prepared.