this post was submitted on 18 Nov 2024

903 points (99.6% liked)

Technology

59466 readers

3332 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

903

Let's Encrypt is 10 years old today ! (letsencrypt.org)

submitted 1 day ago by pcouy@lemmy.pierre-couy.fr to c/technology@lemmy.world

69 comments fedilink hide all child comments

Happy birthday to Let's Encrypt !

Huge thanks to everyone involved in making HTTPS available to everyone for free !

(page 2) 19 comments

sorted by: hot top controversial new old

[–] RoyaltyInTraining@lemmy.world 16 points 1 day ago (3 children)

Let's Encrypt is amazing, but are there any equally trustworthy alternatives people could switch to if something bad happens to it?

[–] treadful@lemmy.zip 12 points 1 day ago (3 children)

They came up with the ACME protocol, so presumably somebody could. The real barrier to entry is the cost of getting into that certificate chain of trust. I have no idea why it's so difficult and expensive.

load more comments (3 replies)

[–] fmstrat@lemmy.nowsci.com 8 points 1 day ago (1 children)

If it begins to enshitify, someone will quickly take up the helm. It's become so core now that someone like Cloudflare would just be like "We do this now."

[–] CosmicTurtle0@lemmy.dbzer0.com 8 points 1 day ago (2 children)

Cloudflare sort of provides this now by being a MITM to secure your site between your server and the end user. But this requires you and your end user to trust Cloudflare.

And fwiw the ACME protocol is open so anyone can implement it. I believe even the ACME software that EFF sends out allows you to choose your server with some configuration.

[–] fmstrat@lemmy.nowsci.com 1 points 18 hours ago

Yup, it does. I think I still have my server hard coded from when it first launched.

load more comments (1 replies)

[–] Laser@feddit.org 7 points 1 day ago (1 children)

Maybe ZeroSSL

[–] Redjard@lemmy.dbzer0.com 1 points 1 day ago (1 children)

They don't offer wildcard certs, but otherwise I think they are.
I wanna say acme.sh defaults to them.

[–] Laser@feddit.org 1 points 23 hours ago (2 children)

Never used them, but they state at https://zerossl.com/features/acme/ that their free acme certs include wildcards.

load more comments (2 replies)

[–] noxy@yiffit.net 6 points 1 day ago

Underrated. Stuff rocks.

[–] crusa187@lemmy.ml 8 points 1 day ago

Yay for their glorious, free trusted ssl certs. Love this project!

[–] digdilem@lemmy.ml 1 points 1 day ago* (last edited 1 day ago) (2 children)

Sleeping too well lately? Consider this:

If LetsEncrypt were to suffer a few weeks outage, how much of the internet would break?

load more comments (2 replies)

load more comments