Let's Encrypt Launch Plan [telecom]

Jun 17, 2015 1 Replies
Let's Encrypt Launch Plan [telecom] open original image

BY JACOB HOFFMAN-ANDREWS



The first free and automated certificate authority, Let's Encrypt, will launch to the public in September of this year. This is a huge milestone for web security and privacy. Encryption in transit (HTTPS) is vital to protect people and websites from spying and tampering. Someday soon, we hope every site on the web will use HTTPS by default.



Unfortunately, there are still obstacles preventing some sites from implementing HTTPS. Many are stymied by the need to obtain and install a certificate. For years, this was an expensive and difficult process. Today, it's possible to obtain a certificate for free, so it is merely a difficult process. Our informal tests have shown that it often takes 1-3 hours for a web administrator to install a certificate. People without web administration skills may not be able to install one at all. We think that's not acceptable. The free and open web must be accessible to anyone who wants to publish their thoughts, not just those with technical skills. As HTTPS becomes a more integral part of the web, we must democratize access to its benefits.



formatting link


Prevent competition? Have you counted the CA's that your typical web browser trusts? My browser has about 200, including Startcom which issues ordinary certs in about 10 minutes for $0.

Let's Encrypt is interesting because the whole thing is automated at the server end once the required software is installed, which will be no big deal. (It's like installing PHP or other plugins.) The level of security isn't fabulous, but it's similar to what other CAs do now and it means that all of those cheap pre-fab web sites running Wordpress and the like can do https with one click by the server operator.

R's, John

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required