2 ms·
The point being that the monopoly's back has been broken. We're no longer in a situation where there needs to be >100 CAs for market competition purposes; there
by woodruffw 4y ago
The point being that the monopoly's back has been broken. We're no longer in a situation where there needs to be >100 CAs for market competition purposes; there's now a free, universally available, public service.
- lmm 4y agoIs LE really universally available? I'm not aware of them making any public commitment to serve unpopular websites (thinking of e.g. KiwiFarms), and they used to check an opaque Google blacklist before issuing certificates.
- woodruffw 4y agoThey list no stipulations about prohibited certificate uses[1]. Their restrictions on domain uses seem to be mostly tied to legal requirements (not issuing for sanctioned countries, for example). It's all also pretty transparent, from what I can tell[2][3]. Certainly more so than a normal CA. [1]: https://letsencrypt.org/documents/isrg-cp-v3.3/#1.4.2-prohibited-certificate-uses https://letsencrypt.org/documents/isrg-cp-v3.3/#1.4.2-prohib... [2]: https://letsdebug.net/ https://letsdebug.net/ [3]: https://github.com/letsdebug/letsdebug https://github.com/letsdebug/letsdebug