Conversation

Yesterdays link to the Let‘s Encrypt blog dragged in some people who seem to think that CAs are unnecessary or even evil.

LE is s very small group who set out to improve the terrible CA situation and the fucking middle box corruptions.

They did that successfully with a budget that a medium sized city spends on its department for car license plates.

So, my advice: don‘t yell at people who made the world somewhat better or you‘ll soon run out of ones who try.💁🏻‍♂️

4
1
1

@icing Sometimes it feels like that big chunk of those people are ones that haven't actually experienced times before LE existed, but have somehow learned those attitudes from the generation who have.

0
0
0

@icing just link them “on trusting trust” and block them when they whine

0
0
0

@icing "don‘t yell at people who made the world somewhat better or you‘ll soon run out of ones who try" is a great quote

0
0
1
@icing CAs are a what you could call a "necessary evil", like lots of things in today's society, but i don't consider LE to be bad, compared to what other corporations do. It was an initiative to improve security on the web and it has been successful. Although, to be honest, i would like to see a more decentralized option being adopted instead.
1
0
5

@getimiskon One other thing LE has brought on is that there are now several (I think at last count I knew of 4 or 5, but I haven't exactly been keeping close track) CAs which use the same protocol for certificate issuance (ACME) and offer certificates at no cost; and I believe also other CAs now offer for-pay certificates also using ACME. This all has *hugely* improved the situation with regards to automation.

Can we do more? Sure. Is this a huge improvement over what we had? HELL YES.

@icing

1
0
1