ACME and LetsEncrypt should allow for easy to deploy and free (or cheap) certificates this year. With that and the use of SRV records to find the HTTPS endpoint

ACME and LetsEncrypt should allow for easy to deploy and free (or cheap) certificates this year. With that and the use of SRV records to find the HTTPS endpoint, it could well be made simpler to deploy Persona this year. (For those unfamiliar with SRV records, they're found at _service._proto.domain and contain a target name and port at which a service for domain can be found. ie: _persona-https._tcp.user.example could list provider.example:8443, and provider.example:8443 would be expected to be able to produce a certificate for user.example.)