Standing on our own two feet
letsencrypt.org
Standing on our own two feet
1–10 of 200 posts
Re: Standing on our own two feet
#2Let’s Encrypt cross-signature with IdenTrust "DST Root X3" is ending on September 1, 2021 but 33.8% of Android devices are running versions under 7.1 which don't trust Let’s Encrypt new root certificate "ISRG Root X1"
Re: Standing on our own two feet
#3Nice TL;DR, thx
Re: Standing on our own two feet
#4Let’s Encrypt cross-signature with IdenTrust "DST Root X3" is ending on September 1, 2021 but 33.8% of Android devices are running versions under 7.1 which don't trust Let’s Encrypt new root certificate "ISRG Root X1"
Workaround is Firefox Mobile (because it ships with its own root certs), but that's a significant burden to place on the user.
Re: Standing on our own two feet
#5Let’s Encrypt cross-signature with IdenTrust "DST Root X3" is ending on September 1, 2021 but 33.8% of Android devices are running versions under 7.1 which don't trust Let’s Encrypt new root certificate "ISRG Root X1"
Workaround is Firefox Mobile (because it ships with its own root certs), but that's a significant burden to place on the user.
Also the post says that Firefox doesn't work on Androids older than 5.0 which according to the dashboard are still 5.9% of devices.
For those older devices, the only option is to install the new root certificate.
Anyways, there are billions of Android devices out there. 33% of those is a large number. You can't just tell all of them that they are wrong.
If this happens, people will move away from Let's encrypt in masses. They don't realize yet how self-harming this really is.
Re: Standing on our own two feet
#6Earlier quoted context omitted.
Workaround is Firefox Mobile (because it ships with its own root certs), but that's a significant burden to place on the user.
Also the post says that Firefox doesn't work on Androids older than 5.0 which according to the dashboard are still 5.9% of devices. For those older devices, the only option is to install the new root certificate. Anyways, there are billions of Android devices out there. 33% of those is a large number. You can't just tell all of them that they are wrong. If this happens, people will move away from Let's encrypt in mas…
In the post, they advertise that they are going to continue to offer a service that provides certificates signed with the old one.
Re: Standing on our own two feet
#7> Without IdenTrust, Let’s Encrypt may have never happened and we are grateful to them for their partnership.
What I have never understood is why IdenTrust accepted to cross-sign Let’s Encrypt's root certificate.
With that move, IdenTrust basically broke the CA cartel and helped driving the price of basic certificates to zero. How did they, as a for-profit organization, justify "doing the right thing" when that meant disrupting their own market?
Anyway, kudos to IdenTrust.
Re: Standing on our own two feet
#8> Without IdenTrust, Let’s Encrypt may have never happened and we are grateful to them for their partnership. What I have never understood is why IdenTrust accepted to cross-sign Let’s Encrypt's root certificate. With that move, IdenTrust basically broke the CA cartel and helped driving the price of basic certificates to zero. How did they, as a for-profit organization, justify "doing the right thing" when that meant…
Always better to be doing the disruption rather be the one being disrupted.
Perhaps they saw the writing on the walls and wanted to boost their standing in the post LetsEncrypt world.
Re: Standing on our own two feet
#9Earlier quoted context omitted.
Also the post says that Firefox doesn't work on Androids older than 5.0 which according to the dashboard are still 5.9% of devices. For those older devices, the only option is to install the new root certificate. Anyways, there are billions of Android devices out there. 33% of those is a large number. You can't just tell all of them that they are wrong. If this happens, people will move away from Let's encrypt in mas…
In the post, they advertise that they are going to continue to offer a service that provides certificates signed with the old one.
... which will work until September 2021.
Re: Standing on our own two feet
#10Earlier quoted context omitted.
Also the post says that Firefox doesn't work on Androids older than 5.0 which according to the dashboard are still 5.9% of devices. For those older devices, the only option is to install the new root certificate. Anyways, there are billions of Android devices out there. 33% of those is a large number. You can't just tell all of them that they are wrong. If this happens, people will move away from Let's encrypt in mas…
In the post, they advertise that they are going to continue to offer a service that provides certificates signed with the old one.
That's not gonna help as the root will expire, so the devices stuck with the older root will still shows errors when trying to use them.