5 ms·

Good to know, and I'm glad there's an alternative to Let's Encrypt, just in case. Is ZeroSSL trusted by old Android devices? If so, that might be a work-aroun

Good to know, and I'm glad there's an alternative to Let's Encrypt, just in case. Is ZeroSSL trusted by old Android devices? If so, that might be a work-around for Let's Encrypt's cross-signing from IdenTrust expiring.

mholt 6y ago
Yes as far as I know; their Sectigo/Comodo root is older. But, you can still use Let's Encrypt with old Android devices until the later part of 2021 using the alternate chain: https://letsencrypt.org/2020/11/06/own-two-feet.html https://letsencrypt.org/2020/11/06/own-two-feet.html (As a point of reference, Caddy supports configuring this alternate chain.)
- stephenr 6y ago
  If zerossl is reselling/a subsidiary of sectigo, that’s enough reason to never use this. Sectigo is the new name for Comodo. The same bunch of pricks who tried to trademark “Let’s Encrypt”. Other players in the acme cert “business” is great. Renaming a slime ball name and carrying on like nothing happened is not ok.
  - pbronez 6y ago
    "If you can't beat 'em, join 'em"
calcifer 6y ago
> Is ZeroSSL trusted by old Android devices? Yes. The intermediate certificate has been included since Android 6.0 [1] and the root expires in 2038 [2]. [1] https://android.googlesource.com/platform/system/ca-certificates/+/2a48c2679ecacd680ad757f3e1607683c9845ba0 https://android.googlesource.com/platform/system/ca-certific... [2] https://crt.sh/?id=1199354 https://crt.sh/?id=1199354
- gregoriol 6y ago
  Android 6.0+ is not that much better than future Let's Encrypt's Android 7.1+ It seems that there is no real alternative... Let's Encrypt's move is going to obsolete a huge lot of devices :-/
  - calcifer 6y ago
    > Android 6.0+ is not that much better That doesn't matter, the root that signed the intermediate cert was created in 2010 [1] which means it's usable for Android>=2.2. [1] https://crt.sh/?id=1199354 https://crt.sh/?id=1199354

mholt 6y ago

Yes as far as I know; their Sectigo/Comodo root is older. But, you can still use Let's Encrypt with old Android devices until the later part of 2021 using the alternate chain: https://letsencrypt.org/2020/11/06/own-two-feet.html https://letsencrypt.org/2020/11/06/own-two-feet.html (As a point of reference, Caddy supports configuring this alternate chain.)

stephenr 6y ago
If zerossl is reselling/a subsidiary of sectigo, that’s enough reason to never use this. Sectigo is the new name for Comodo. The same bunch of pricks who tried to trademark “Let’s Encrypt”. Other players in the acme cert “business” is great. Renaming a slime ball name and carrying on like nothing happened is not ok.
- pbronez 6y ago
  "If you can't beat 'em, join 'em"

calcifer 6y ago

> Is ZeroSSL trusted by old Android devices? Yes. The intermediate certificate has been included since Android 6.0 [1] and the root expires in 2038 [2]. [1] https://android.googlesource.com/platform/system/ca-certificates/+/2a48c2679ecacd680ad757f3e1607683c9845ba0 https://android.googlesource.com/platform/system/ca-certific... [2] https://crt.sh/?id=1199354 https://crt.sh/?id=1199354

gregoriol 6y ago
Android 6.0+ is not that much better than future Let's Encrypt's Android 7.1+ It seems that there is no real alternative... Let's Encrypt's move is going to obsolete a huge lot of devices :-/
- calcifer 6y ago
  > Android 6.0+ is not that much better That doesn't matter, the root that signed the intermediate cert was created in 2010 [1] which means it's usable for Android>=2.2. [1] https://crt.sh/?id=1199354 https://crt.sh/?id=1199354