>Let’s encrypt works, it works without attention, it’s free, and ubiquitous. It's not so easy, since there is always a tradeoff with these things. The exact sa

>Let’s encrypt works, it works without attention, it’s free, and ubiquitous. It's not so easy, since there is always a tradeoff with these things. The exact same argument could be applied to Java as a backend and many people happily do so... until it turns out that some lone guy in Switzerland, who has thanklessly maintained a highly popular logging library for the last 20 years, forgot to sanitise certain inputs. Aaaand now you have remote code execution on Apple's servers and just about every other Fortune 500 company. The world needs more people who scrutinise widely used security relevant software, not less.