4 ms·
Kinda surprised there isn't a few CAs that set up Let's Encrypt-like automated infrastructure that charge a small subscription fee for certificates. I'd pay $1-
by packetlost 3y ago
Kinda surprised there isn't a few CAs that set up Let's Encrypt-like automated infrastructure that charge a small subscription fee for certificates. I'd pay $1-$3/m or so for preventing a mono-culture + big attack surface, but don't really want to give up the convenience of Let's Encrypt.
I know there's a big barrier to entry for being a CA (as there should be), but it shouldn't be impossible.
- Avamander 3y ago> Kinda surprised there isn't a few CAs that set up Let's Encrypt-like automated infrastructure that charge a small subscription fee for certificates. There are other ACME-compatible CA's.
- packetlost 3y agoOh? Examples?
- capableweb 3y agohttps://zerossl.com/ https://zerossl.com/ is a popular alternative. https://www.buypass.com/ https://www.buypass.com/ is another one I haven't personally tried.
- ehhthing 3y agoAlso Google Trust Services has free certificates although you need a Google Cloud project for it.
- capableweb 3y agoNot sure Google is a great alternative if you want to prevent further centralization of CAs :)
- packetlost 3y agoOh cool, I couldn't find those on Google. I'll check them out
- seabass-labrax 3y agoI think that Let's Encrypt gets a lot of undeserved criticism for being the only major ACME-compatible CA. Yes, it's not so good to have monopolies on authenticity, but Let's Encrypt was founded by Mozilla, the EFF and the University of Michigan and was endorsed by the FSF. That's a pretty good set of organisations when considering the general status of the internet, and a set that doesn't overlap with the major players in consumer technology (Apple, Microsoft and Google).