[ALUG] Free HTTPS Certificates

[Andreas Tauscher]

On 09/25/2015 12:41 PM, Ismail Settenda via Linux wrote:
> Hi all,
> 
> Can anyone confirm the below:
> 
> A sea change in HTTPS web encryption is coming and it's free | ITworld
> http://www.itworld.com/article/2985906/security/a-sea-change-in-https-web-encryption-is-coming-and-its-free.html

Old and busted :)
Was here on the list already in May.
Yes it's true. Fully automated issuing of certificates for free.
letsencrypt.org is a little bit behind the time schedule but will be
available this year.
Who needs EV certificates still has to use a commercial CA. The OIDs for
EV certificates are hard coded in the browsers and letsencrypt does not
or even can not fulfil the requirements for EV certificates.
What hopefully arriving in the browsers soon is DANE. Then clients can
also verify self signed certificates. For now a plugin is needed to DANE
verification. On the server side is postfix the first supporting DANE
native.

Andreas


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: OpenPGP digital signature
URL: <http://lists.habari.co.tz/pipermail/linux/attachments/20150925/e3f7f798/attachment.pgp>