3 ms·

How will Let's Encrypt be different/better than a StartSSL Free certificate?

• organsnyder 12y ago
  I used to use StartSSL, but abandoned it for a few reasons: 1. Their user interface is slow and clunky. Acquiring/renewing certificates is a PITA. 2. For organizations, they require both extended personal validation and organizational validation. In addition to being fairly expensive ($100 annually, each), they require you to send images of a bunch of sensitive personal documents (passport, credit card, etc.). While you can often slip by and get certs without them realizing you're getting them for an organization, once they've noticed and flagged your account, each cert requires manual review. 3. Their website hasn't been updated in a number of years. They do not give the impression of being a healthy company.
• icebraining 12y ago
  Free certificate revocations. StartSSL was crucified for charging $25 for revocations, and not waiving the fee during Heartbleed.
  • AlyssaRowan 12y ago
    This, 100%. They also plan to adopt Certificate Transparency, I believe. And it'll hopefully be trivial to set up, once the scripting is all finished. No excuses, people. Give it a few years and we'll be seriously talking about turning http: off, or at least putting security warnings on it, denying cookies and scripting, etc. You don't still use telnet, do you?
• thomasfoster96 12y ago
  By the looks of the Github account, Let's Encrypt will let me programmatically get a certificate for free when I run non start in my node app, or easily set up HTTPS on my Apache web server, among other things. All for free with minimal work.