Live data from Hacker News

Let's Encrypt is Trusted

letsencrypt.org

11–20 of 318 posts

Re: Let's Encrypt is Trusted

#13
post #9
post #2

See a Let's Encrypt cert in action: https://helloworld.letsencrypt.org/ Nice work team!

I was unable to connect using a vendor-specific browser on an old Android 4 device. Is this a limitation of the LE cert, or a cipher suite issue with older browsers, or something else? Really looking forward to spreading HTTPS far and wide.

Checked with a sysadmin. I'm pretty sure it's a ciper suite mismatch. The helloworld site is configured with "modern" settings from this page:

https://mozilla.github.io/server-side-tls/ssl-config-generat...

Re: Let's Encrypt is Trusted

#14
post #12

"We’re pleased to announce that we’ve received cross-signatures from IdenTrust" How is this beneficial for IdenTrust?

Related discussion: https://community.letsencrypt.org/t/what-is-the-business-mod...

It establishes IdenTrust as a more influential leader of SSL certificates on the Web. There are other ways CAs can make money, and this extra publicity will probably serve them well.

Re: Let's Encrypt is Trusted

#15
post #9
post #2

See a Let's Encrypt cert in action: https://helloworld.letsencrypt.org/ Nice work team!

I was unable to connect using a vendor-specific browser on an old Android 4 device. Is this a limitation of the LE cert, or a cipher suite issue with older browsers, or something else? Really looking forward to spreading HTTPS far and wide.

Taking a guess from the SSL Labs report[1], that site appears to be using the modern config from Mozilla's toolkit[2], which limits it to browsers from the last few years.

1: https://www.ssllabs.com/ssltest/analyze.html?d=helloworld.le... 2: https://mozilla.github.io/server-side-tls/ssl-config-generat...

Re: Let's Encrypt is Trusted

#16
post #8
post #2

See a Let's Encrypt cert in action: https://helloworld.letsencrypt.org/ Nice work team!

"This website does not supply ownership information."

Neither does https://news.ycombinator.com. That's the kind of certificate most websites have now.
Post reply on HN