3 ms·
BTW, all the recent certificate shenanigans have invovled for-profit CAs [1]. [1]: https://sslmate.com/resources/certificate_authority_failures https://sslmate
by alwillis 11mo ago
BTW, all the recent certificate shenanigans have invovled for-profit CAs [1].
[1]: https://sslmate.com/resources/certificate_authority_failures https://sslmate.com/resources/certificate_authority_failures
- ranger_danger 11mo agoI still believe in "if it's free, you are the product."
- alwillis 11mo agoIn what way is a non-profit such as Lets Encrypt attempting to monetize their customer relationships? They've issued more 700 million certificates at no cost. While I don't get the cynicism in this case, you would agree supporting a secure web is in the public interest, right?
- ranger_danger 11mo agoI wasn't referring to monetization, but government surveillance.
- edoceo 11mo agoHow would they surveil? And also, have you disabled the certs you don't trust from these providers on your systems?
- nixosbestos 11mo ago[flagged]
- deleted 11mo ago[deleted]
- IgorPartola 11mo agoTo each their own, but you do realize that you are using a free website running on free software secured by free TLS libraries transmitted via routers that often run free software and firmware? Also how much did you pay for the browser you used to make these comments? There is a sea of difference between something like Google/Facebook/TikTok and Let’s Encrypt/the Linux Foundation/FSF/etc. I can only assume you can’t see that difference if you have spent no time reading about these things, but I would encourage you to. This stuff is important especially if you get to make security decisions for any kind of product.