Re: domain naming and SSL behaviour poll

[Noeck]

Hi Urs,

>>> Any suggestions?
>>
>> https://letsencrypt.org/ ?
> 
> Thanks.  Looks like it's worth a look, even when they probably aren't "known" 
> to the browsers yet.
> 
> Any idea how this compares to cacert.org (conceptually, morally)?

Let's encrypt is probably the way to go (at least from what I know).
While cacert is a nice idea that I support, it never got a widespread
use (known by browsers) for several reasons.

Let's encrypt is discussed for almost a year now [1] and it is the
common effort of free software communities and the big players to get
widespread SSL.

It is supported by the EFF as well as most browsers. I haven't tested
that, but at least they say that the browsers should accept the
certificates [2].

Cheers,
Joram


[1]: For Urs in German:
http://www.heise.de/security/meldung/Let-s-Encrypt-Mozilla-und-die-EFF-mischen-den-CA-Markt-auf-2460155.html
[1a]:
http://www.heise.de/security/meldung/Erstes-Zertifikat-von-Let-s-Encrypt-zum-Test-bereit-2814330.html
[2]: https://community.letsencrypt.org/t/frequently-asked-questions-faq/26