In this short article Let’s Encrypt lists challenges ahead, like service growth, new features and infrastructure and finances.
Let’s Encrypt had a great year in 2017. We more than doubled the number of active (unexpired) certificates we service to 46 million, we just about tripled the number of unique domains we service to 61 million, and we did it all while maintaining a stellar security and compliance track record. Most importantly though, the Web went from 46% encrypted page loads to 67% according to statistics from Mozilla - a gain of 21 percentage points in a single year - incredible. We’re proud to have contributed to that, and we’d like to thank all of the other people and organizations who also worked hard to create a more secure and privacy-respecting Web.
I think Let's Encrypt is a great service. Want to share your war story? Can you think of any downsides or threats related to all this?
[Ed note: SoylentNews uses Gandi for "soylentnews.org" and uses LetsEncrypt for all other domains and subdomains. --martyb]
(Score: 2, Disagree) by ledow on Wednesday March 07 2018, @08:11AM (1 child)
Self-signed certs is easy to fix - accept the certificate into your store and browsers will shut up.
But un-encrypted pages is just idiotic even for local networks in this day and age, if you have even two users rather than one. XSS attacks on router settings pages, password sniffing, and even just plain fakery.
The "well, home users don't need to worry about that because they're the only one on the local network" thing is dead already, because not only are such people in the absolute minority but because it's stupid to let down everyone's guard just for the reasonthat they might have to run a browser written in this decade and click "I accept" once in a while.
(Score: 3, Informative) by Pino P on Thursday March 08 2018, @01:38AM
Provided that the following are true: