Comment on Letsencrypt is under US jurisdiction. Is there a free-er alternative?
bjoern_tantau@swg-empire.de 2 hours agoUsually they make money with extended certificates where they not only offer a certificate for example.com but also certify that it belongs to Example Ltd.
Those extended certificates used to show the company name next to address bars, but I don’t think browsers do that anymore.
victorz@lemmy.world 2 hours ago
I thought that was the whole point of a certificate, to show that the website belongs to the company? Or nah?
bjoern_tantau@swg-empire.de 2 hours ago
Nah, the point is to encrypt the traffic and tell you what you are receiving really comes from example.com and not an evil third party.
victorz@lemmy.world 1 hour ago
Ah, right. That’s the primary purpose, thank you for the reminder! 🙏
WhyJiffie@sh.itjust.works 1 hour ago
It’s actually to prove that a web server belongs to (or is trusted by for delivering their content) a specific website.
qualified certificates go a step further, by proving that a web server belongs to a specific company or a real person. but that’s costly, because verification is inherently more difficult.