Live data from Hacker News

Early Impacts of Let's Encrypt

tacticalsecret.com

1–10 of 98 posts

Re: Early Impacts of Let's Encrypt

#3
Wow. Public beta for 2.5 months and already 700,000 certificates issued, more than a third of the largest competitor's number, about 10% of the entire secure Web.

There certainly seems to have been pent-up demand.

Re: Early Impacts of Let's Encrypt

#4
tldr: Let's Encrypt is achieving its original mission: help people use TLS on domains that were previously insecure, and make the internet a safer place.

> In the first quarter of its' operation then, Let's Encrypt has far and away been used more to secure previously-unsecured (or at least untrusted) websites than simply as a cost-savings measure.

Re: Early Impacts of Let's Encrypt

#5
I've used them a bunch. We host a lot of internal-facing utilities that are low-profile, but occasionally hosting sensitive data. In the past I couldn't convince managers to spend money on certs even if the cost of someone stumbling on these sites could be very high and certs are cheap. Now I don't even have to ask.

Re: Early Impacts of Let's Encrypt

#7
post #5

I've used them a bunch. We host a lot of internal-facing utilities that are low-profile, but occasionally hosting sensitive data. In the past I couldn't convince managers to spend money on certs even if the cost of someone stumbling on these sites could be very high and certs are cheap. Now I don't even have to ask.

Keep in mind that Let's Encrypt publishes a searchable list of all domains issued.

https://crt.sh/?Identity=%25&iCAID=7395

Re: Early Impacts of Let's Encrypt

#8
post #5

I've used them a bunch. We host a lot of internal-facing utilities that are low-profile, but occasionally hosting sensitive data. In the past I couldn't convince managers to spend money on certs even if the cost of someone stumbling on these sites could be very high and certs are cheap. Now I don't even have to ask.

Yep - this is something we plan to do as well, SSLize all the dev servers just because we can and then they better reflect live.

Re: Early Impacts of Let's Encrypt

#9
Does anyone know where one can get a free wildcard certificate? Need it for development and foo/bar/baz/biff.example.com change names regularly (they include the hash of the code commit) so I would like to get a *.dev.example.com wildcard cert. (one that won't give warnings that scare the business types who are testing the code, and won't understand what self-signed means.)

Re: Early Impacts of Let's Encrypt

#10
post #9

Does anyone know where one can get a free wildcard certificate? Need it for development and foo/bar/baz/biff.example.com change names regularly (they include the hash of the code commit) so I would like to get a *.dev.example.com wildcard cert. (one that won't give warnings that scare the business types who are testing the code, and won't understand what self-signed means.)

Amazon Cetrificate Manager seems to do this, but it's only available in one region right now.
Post reply on HN