4 ms·
So how the hell did Let's Encrypt convince the certificate cartel to let them in and undercut their products?
by tomc1985 5y ago
So how the hell did Let's Encrypt convince the certificate cartel to let them in and undercut their products?
- vurpo 5y agoThey didn't need to do that. They simply got their cert into browsers and OSes, and there you go.
- thwayunion 5y agoThey didn't. The convinced the browsers and operating systems.
- Nullabillity 5y agoThey got cross-signed by IdenTrust, which as I understand it were/are primarily selling EV certificates to financial institutions (which Let's Encrypt doesn't really compete with), rather than DV certificates (like most CAs out there do, including LE). These days they are trusted directly by most browsers and OSes as the sibling comments mention, but the IdenTrust cross-signature was vital for bootstrapping and is still used for some older systems.