3 ms·
The alternative you suggest has a longer chain of certificates, and more difficult setup. Using ZeroSSL is way easier with less bytes on the TLS handshake.
by netheril96 4y ago
The alternative you suggest has a longer chain of certificates, and more difficult setup. Using ZeroSSL is way easier with less bytes on the TLS handshake.
- Ayesh 4y agoDo you have a test host with the Zerossl chain that you speak of? Use https://aye.sh https://aye.sh if you want to try a host using the ECC chain from LE.
- netheril96 4y agoSo the article is outdated I guess. The length of the chain is the same now. I'll consider switching back to Let's Encrypt once this setup doesn't require a whitelist.