crapsalot

4 ms·

1. 1.▲
   by crapsalot 11y ago

   2. Should I trust domains with Let's Encrypt-issued certificate less than those with paid certificates with identity validation? No... Lets Encrypt should not have the same level of trust as the basic DV level cert from a standard CA.
2. 2.▲
   by crapsalot 11y ago

   Wrong. Most SSL cert CA's check DNS for email addresses and only validate DNS entries. Lets Encrypt only checks DNS for IP addresses and issues certs based on root access to the IP addresses. A CA DV is not equivalent to a Lets Encrypt
3. 3.▲
   Lets Encrypt Is Insecure

   2 points by crapsalot 11y ago|2 comments