Let's Encrypt
letsencrypt.org
Let's Encrypt is a free, automated, and open certificate authority brought to you by the nonprofit Internet Security Research Group (ISRG). Read all about our nonprofit work this year in our 2023 Annual Report.

Happy birthday to Let’s Encrypt !

Huge thanks to everyone involved in making HTTPS available to everyone for free !

  • 0x01@lemmy.mlEnglish
    119·
    17 hours ago

    Man I love let’s encrypt, remember how terrible ssl was before the project landed?

    • rottingleaf@lemmy.worldEnglish
      1·
      21 minutes ago

      When you have to use it, then yes. But in general standard technologies of today are mostly rigged.

    • Rikudou_Sage@lemmings.worldEnglish
      50·
      17 hours ago

      Crazy times. Nowadays it’s weird when a website doesn’t have https. Back then it was pretty much big companies only. And the price of a wildcard certificate…

      • xthexder@l.sw0.comEnglish
        3·
        11 hours ago

        Oh man, I forgot about startssl until just now. I definitely had a few of those certs. If you wanted something fancy like a wildcard cert back then, you were paying $$$

        • lud@lemm.eeEnglish
          1·
          4 hours ago

          Luckily, wildcard certs are insecure and should be avoided.

    • leisesprecher@feddit.orgEnglish
      21·
      16 hours ago

      And if you remember, that this whole shebang was only started, because Snowden revealed that the NSA spied on all of us, it’s getting much much darker.

      • rottingleaf@lemmy.worldEnglish
        1·
        17 minutes ago

        People behave as if having a green lock icon were enough to consider you’re safe.

        People behave as if there were not multiple cases of abuse of PKI.

        People behave as if all those whistleblowing cases exposing widespread illegal activities by the state were not treated as normal, except those exposing them being chased and vilified.

        What I’m trying to say is that we’re past the stage where techno-optimism about the Internet made sense. They just say in the news that abusing you is good, and everybody just takes it.

    • pcouy@lemmy.pierre-couy.frOPEnglish
      25·
      17 hours ago

      I did not have the money to pay the insane amounts these greedy for-profit certificate authorities asked, so I only remember the pain of trying to setup my self-signed root certificate on my several devices/browsers, and then being unable to recover my private key because I went over the top with securing it.