letsgetreal

2 ms·

1. 1.▲
   by letsgetreal 10mo ago

   Nothing mentioned will help for a website with a Let's Encrypt SSL cert. How can I know with confidence that I can conduct commerce with this website that purports to be the company and it's not a typo squatter from North Korea? A
2. 2.▲
   by letsgetreal 10mo ago

   The "most people won't care argument" doesn't inspire confidence in the authenticity of the website. It's essentially a self-signed cert that anyone could make with the false security of a root certificate authority
3. 3.▲
   by letsgetreal 10mo ago

   FIDO2 doesn't solve the first website contact trust problem - only the HTTPS certificate does that.
4. 4.▲
   by letsgetreal 10mo ago

   Let's Encrypt allows anyone to have secure https communication, sure, but it doesn't address the question of website authenticity. I groan when I'm on an e-commerce site and I click on the browser URL lock icon and see a Let&