posted in Selfhosted
Letsencrypt is under US jurisdiction. Is there a free-er alternative?
I know that I can simply make my own private certificate authority that only I and my family trust. But is there some public provider like letsencrypt that is in a free-er part of the world than the US?
Replying to @Sibbo@sopuli.xyz
There are some commercial Certificate Authorities that offer free certificates. But in contrast Let’s Encrypt is a non-profit.
Replying to @diecknet@discuss.tchncs.de
commercial
free certificates
How do they make money?
Replying to @victorz@lemmy.world
Usually they make money with extended certificates where they not only offer a certificate for example.com but also certify that it belongs to Example Ltd.
Those extended certificates used to show the company name next to address bars, but I don’t think browsers do that anymore.
Replying to @bjoern_tantau@swg-empire.de
a certificate for example.com
also certify that it belongs to Example Ltd.
I thought that was the whole point of a certificate, to show that the website belongs to the company? Or nah?
Replying to @victorz@lemmy.world
Nah, the point is to encrypt the traffic and tell you what you are receiving really comes from example.com and not an evil third party.
Replying to @bjoern_tantau@swg-empire.de
Ah, right. That’s the primary purpose, thank you for the reminder! 🙏