3 ms·

These points have been debunked dozens of times. SSL is EASILY affordable. Not only are there free options, but many sites provide widely-trusted certs for arou

by vtlynch 11y ago

These points have been debunked dozens of times. SSL is EASILY affordable. Not only are there free options, but many sites provide widely-trusted certs for around $7/yr. There is little legitimacy behind the claims that the US has backdoored encryption via the actual algorithm. Cryptography professionals have pointed to a few specific ECC curves that may have issues but there is nothing conslusive. Im assuming by "self made encryption" you mean self-signed certs. These will never work - first off they do nothing to compensate for algorithmic flaws which you purport exist. They also provide no identity assurance, which makes it impossible to determine the difference between a legitimate/illegitimate key change.

yellowapple 11y ago
> Not only are there free options Last I checked, there's no plural in that; the only free certs available (as far as I know) are the ones from StartSSL, and these aren't free to businesses (or individuals who don't have a residential mailing address and had to rely on a P.O. Box, as was my case), and the customer support makes Comcast look heavenly in comparison. And no, Let's Encrypt doesn't count yet. > but many sites provide widely-trusted certs for around $7/yr. Which ones? I'd be interested in making more of my things SSL'd if I knew I could get certs for that cheap. Are those for specific domains or are they wildcards? If the former, does a www cert cover the apex domain (or vice versa)?