Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Let's Encrypt bans certificate usage in any US sanctioned territory [pdf]

letsencrypt.org

Post reply on HN
Print view View original

131–140 of 404 posts

Re: Let's Encrypt bans certificate usage in any US sanctioned territory [pdf]

#131

Post by mfuzzey »

cassianoleal wrote: post #23
idoubtit wrote: post #14

Couldn't LE have a branch in Europe or anywhere outside the USA and its minions? Because they're betraying their own goals, as stated in their About page: “It is a service run for the public’s benefit. [...] Anyone who owns a domain name can use Let’s Encrypt to obtain a trusted certificate at zero cost. [...] Let’s Encrypt is a joint effort to benefit the community, beyond the control of any one organization.” Now t…

They could, but if the branch didn’t follow these laws, the main US branch would still be liable.

Just close down completely in the US and move to the EU

Re: Let's Encrypt bans certificate usage in any US sanctioned territory [pdf]

#132

Post by pratyahava »

piskov wrote: post #31
Panzerschrek wrote: post #13

Does it mean that russian/iranian web-sites using letsencrypt stop working and need to change their certificate provider?

They already revoced certificates for some russian sites

any details on that? links to people reporting it?

Re: Let's Encrypt bans certificate usage in any US sanctioned territory [pdf]

#133

Post by gossamer »

Towaway69 wrote: post #12

Sanctioned has a double meaning here[1]: > 2. officially or formally ratified or confirmed. > 3. penalized, especially by way of discipline or to force compliance with legal obligations. So who can use lets encrypt? Those that are penalised or those that are confirmed. [1] https://www.dictionary.com/browse/sanctioned

It took me a minute to understand the original post because the verb sanction means both itself and basically the opposite of itself. It would be better to say "any territory that the US has levied sanctions against". I thought LetsEncrypt had banned its usage in the US! The word for words like sanction is contronym.

Re: Let's Encrypt bans certificate usage in any US sanctioned territory [pdf]

#134

Post by bigfishrunning »

Galanwe wrote: post #124
bigfishrunning wrote: post #113

Earlier quoted context omitted.

Of course not! just find viable alternatives to Microsoft, Apple, Mozilla, YCombinator, Google, Intel, AMD, ... In all seriousness, as an American I'd love to see a healthier, more well-distributed tech industry, but I don't see many companies stepping up to provide competing services. It's my understanding that china has alternatives to many of these products/services, but I really don't see how anyone in Europe cou…

> but I don't see many companies stepping up to provide competing services Maybe because the US dropped most of its anti trust regulations, leading to ridiculously monopolistic practices such as "acquire everything that may be threatening".

When was the last time you heard about a European cellphone manufacturer, or social media network, or web browser being acquired by an American monopoly?

I can only think of Nokia, purchased by microsoft in 2014. Those phones ran windows CE before that even, so you could hardly have avoided the american tech industry.

All I'm trying to say is, it's impossible for Europeans to both A) be on the internet and B) avoid the US tech industry.

Re: Let's Encrypt bans certificate usage in any US sanctioned territory [pdf]

#135

Post by PunchyHamster »

idoubtit wrote: post #14

Couldn't LE have a branch in Europe or anywhere outside the USA and its minions? Because they're betraying their own goals, as stated in their About page: “It is a service run for the public’s benefit. [...] Anyone who owns a domain name can use Let’s Encrypt to obtain a trusted certificate at zero cost. [...] Let’s Encrypt is a joint effort to benefit the community, beyond the control of any one organization.” Now t…

completely independent entity would be far better option. Protocol is open after all, just need pointing to different vendor

Re: Let's Encrypt bans certificate usage in any US sanctioned territory [pdf]

#136

Post by rafram »

cassianoleal wrote: post #126
rafram wrote: post #64

Earlier quoted context omitted.

Other countries sanction each other too.

This is not about countries sanctioning each other. This is the US sanctioning a local company because a foreign company doesn’t follow certain US laws in foreign soil, where such laws don’t apply. It’s a bit like the US arresting your mom at home in Texas because you ate a baggie of magic truffles in Amsterdam.

You're being very vague. Please explain what you mean? I don't see anything here about the US "sanctioning a local company," and I'm not aware of that being possible under US law.

Re: Let's Encrypt bans certificate usage in any US sanctioned territory [pdf]

#137

Post by rafram »

piskov wrote: post #130
rafram wrote: post #63

Earlier quoted context omitted.

Neither Greenland nor the EU has been sanctioned by the US.

Have you heard about the judge from international court or whatever it is called? https://www.france24.com/en/americas/20250820-us-hits-icc-wi...

Are you saying the ICC is the EU? Or that it's Greenland?

Re: Let's Encrypt bans certificate usage in any US sanctioned territory [pdf]

#138

Post by CaliforniaKarl »

leosarev wrote: post #52
Panzerschrek wrote: post #13

Does it mean that russian/iranian web-sites using letsencrypt stop working and need to change their certificate provider?

I hope not. We don't have any alternatives yet.

https://www.actalis.com/activate-free-plan maybe?

Re: Let's Encrypt bans certificate usage in any US sanctioned territory [pdf]

#139

Post by john_strinlai »

jaas wrote: post #118
Insimwytim wrote: post #83

Iran is blocking internet for months, US ...bans creation of secure connections - that'll show 'em! Russian quasi-government structures are spending quadrillion of rubles on a TSPU (censorship system) to spy on Russian residents, US ...helps them by making snooping on what is currently encrypted traffic possible by banning accessible encryption!

Let's Encrypt certificates continue to be available in both Iran and Russia, just not for the Iranian and Russian governments. The terms of service update to clarify what we have always done, comply with relevant law, has not changed the situation for either country.

you should update the documents to reflect this stance.

"You are not a person or entity that is: (a) located in, organized under the laws of, or ordinarily resident in any country or territory that is the target of comprehensive U.S. sanctions; "

this says nothing (edit: specific) about government (edit: only), and is applicable to normal people in those areas.

Re: Let's Encrypt bans certificate usage in any US sanctioned territory [pdf]

#140

Post by lioeters »

joshuaissac wrote: post #125
jaas wrote: post #118

Earlier quoted context omitted.

Let's Encrypt certificates continue to be available in both Iran and Russia, just not for the Iranian and Russian governments. The terms of service update to clarify what we have always done, comply with relevant law, has not changed the situation for either country.

> Let's Encrypt certificates continue to be available in both Iran and Russia, just not for the Iranian and Russian governments. According to https://news.ycombinator.com/item?id=48457280 it affects all people ordinarily resident in those territories, not just their governments: > You are not a person or entity that is: > (a) located in, organized under the laws of, or ordinarily resident in any country or territory…

I wonder what "ordinarily resident" means legally. Like has a permanent address there, even if they don't live there physically..?
Post reply on HN