I’m curious what the benefits are of paying for SSL certificates vs using a free provider such as letsencrypt.

What exactly are you trusting a cert provider with and what are the security implications? What attack vectors do you open yourself up to when trusting a certificate authority with your websites’ certificates?

In what way could it benefit security and/or privacy to utilize a paid service?

And finally, which paid SSL providers are considered trustworthy?

I know Digicert is a big player, but their prices are insane. Comodo seems like a good affordable option, but is it a trustworthy company?

  • Terrasque@infosec.pubEnglish
    2·
    3 months ago

    I still use http a lot for internal stuff running in my own network. There’s no spying there… I hope … And ssl for local network only services is a total pita.

    So I really hope browsers won’t adapt https only

    • Possibly linuxEnglish
      1·
      3 months ago

      I do to. However, that’s the exception. I hope you aren’t running http over the public internet as that’s a massive security issue