5 ms·
Ask HN: What should a Alternative to LetsEncrypt offer
In the name of resilience, what should a true alternative to Lets Encrypt offer for you.
Besides the following basic requirements:
- feature complete (offering both simple domain and wildcard support via ACME)
- registered non-profit
- not inside the US (simply based on resillience)
- like lets encrypt community driven
- kevsamuel 2y agoUsing a different set of libraries as dependencies.
- randompeach 2y agoThanks forgot that point totally/o\
- cranberryturkey 2y agowildcard subdomains
- randompeach 2y agoWhat pattern? ..example.com or just *.sub.example.com?
- elliewithcolor 2y agoWildcards based on multiple * (w.w.example.com) are now allowed by spec.
- cranberryturkey 2y ago*.foo.com
- randompeach 2y agoFair. Yes.
- elliewithcolor 2y agohttps://serverfault.com/questions/104160/wildcard-ssl-certificate-for-second-level-subdomain https://serverfault.com/questions/104160/wildcard-ssl-certif...
- nik736 2y agoWhy are those basic requirements and what has being based in the US to do with resillience?
- randompeach 2y agoThe “requirements”a re things that I already had in mind. The US part is based on legal framework. Based on stuff like politics and such. So another jurisdiction, das would allow the same model then let’s encrypt, would add to the ecosystem more, then another one in der US.
- toast0 2y agoThere's already other CAs that (optionally) use ACME to issue. As I understand it from the mod_md readme [1], Buypass basically works (without must staple), Sectigo and ZeroSSL work too, but require an account to be setup. Are these true alternatives? If not, why not? I don't know where these companies reside. [1] https://github.com/icing/mod_md?tab=readme-ov-file#known-issues-with-other-cas https://github.com/icing/mod_md?tab=readme-ov-file#known-iss...
- randompeach 2y agoThey are alternatives. With true I wanted to specifically point to: nonprofit and same features (so not only simple DV for free accounts but also wildcard.)
- randompeach 2y agoBuypass is based in Norway. Sadly no wildcard. Section is based in the UK. Also no wild card. ZeroSSL is based in Austria. But they are technically a reseller from Sectigo (using a branded intermediate.)
- randompeach 2y agoMy thing is, that a true alternative would atleast offer the same features at the same price point. I’d also a registered non profit: even better.
- cpach 2y agoHow would you fund such an operation? It’s not extremely expensive, but it needs a bit of funding. https://community.letsencrypt.org/t/what-it-costs-to-run-lets-encrypt/82334 https://community.letsencrypt.org/t/what-it-costs-to-run-let...
- KomoD 2y agoIt should have money, a shit ton of it.