ACME Compatible SSL Certificates at Cost-Effective Price (Certera.com)

Comments

• emgh Member, Megathread Squad

  10:02AM edited 10:03AM

  @CerteraSSL said: The era of shorter SSL certificate validity (199-day) is here, making manual certificate renewal and installation more time-consuming than ever

  i dont know anyone who renews their ssl certificates manually, literally every free certificate can and is being automated

  Thanked by 2Mainfrezzer nikio
• forest Member

  10:03AM

  What makes this better than Let's Encrypt which is also automated with short validity, but is free?

  Thanked by 3nikio reikuzan Mainfrezzer
• rpqu Member

  10:05AM

  @forest said:
  What makes this better than Let's Encrypt which is also automated with short validity, but is free?

  And IP certs

  Thanked by 1nikio
• Levi Member

  10:08AM

  I guess code signing certs are still relevant? Web certs are dead business since LE emerged. I remember when EV certs was a thing, a nice green badge
• yoursunny Member, IPv6 Advocate

  10:53AM edited 10:54AM

  @forest said:
  What makes this better than Let's Encrypt which is also automated with short validity, but is free?

  Having more CAs helps avoid Internet centralization.
  Formalizing Dependence of Web Infrastructure section 7
• forest Member

  10:58AM

  @yoursunny said:

  @forest said:
  What makes this better than Let's Encrypt which is also automated with short validity, but is free?

  Having more CAs helps avoid Internet centralization.
  Formalizing Dependence of Web Infrastructure section 7

  Doesn't it also increase attack surface because each new target can sign for virtually any domain?
• nikio Member

  11:13AM

  @Levi said:
  I guess code signing certs are still relevant? Web certs are dead business since LE emerged. I remember when EV certs was a thing, a nice green badge

  The new hot thing on the block are Verified Mark Certificates - that's iff you want Gmail to show a blue check mark next to your emails.
• Mainfrezzer Member

  11:23AM

  @forest said:

  @yoursunny said:

  @forest said:
  What makes this better than Let's Encrypt which is also automated with short validity, but is free?

  Having more CAs helps avoid Internet centralization.
  Formalizing Dependence of Web Infrastructure section 7

  Doesn't it also increase attack surface because each new target can sign for virtually any domain?

  Only thing it was supposed to solve was the plaintext issue, not that someone sends their data willing to anybody else.
• luckypenguin Member

  11:33AM

  Paying for certificates is so 2016. Especially after EV stopped being a thing, there is no
  real need when you have LE, ZeroSSL, Google, Cloudflare. Not that $19.99 per year is expensive, it just an extra thing to renew and keep track of. Feels redundant.

  Thanked by 1Mainfrezzer
• Mainfrezzer Member

  11:36AM

  Yeah it's annoying as hell. It's just convenience for public stuff as you don't need to bother people with self signed stuff. For anything important to myself, I just self sign for long timeframes. Ain't nobody got time for their little games.