IpsumLauren
@IpsumLauren@lemmy.world
This is a remote user, information on this page may be incomplete. View original ↗
- Comment on Letsencrypt is under US jurisdiction. Is there a free-er alternative? 1 hour ago:
Oh snap! That definitely sounds possible. Found more info about it.
tl;dr: Either the attack is ineffective against some browsers that check the certificate transparency logs (like Chrome), or the attack is visible and the CA will lose all its credibility (hopefully being removed from the browsers).
- Comment on Letsencrypt is under US jurisdiction. Is there a free-er alternative? 1 hour ago:
That would be just a nuisance until a new certificate is generated with another vendor (possibly not for free, but cheap enough).
- Comment on Letsencrypt is under US jurisdiction. Is there a free-er alternative? 1 hour ago:
It opens the possibility of a man-in-the-middle attack.
- Comment on Letsencrypt is under US jurisdiction. Is there a free-er alternative? 5 hours ago:
First let’s identify what parts of the world are free-er than the US (for a certificate).
- Comment on Whether or not it was a better fighter than the Spitfire is a matter of debate 3 weeks ago:
There were more hurricanes than spitfires, because they were easier to make.