zlacker

Kinda surprised there isn't a few CAs that set up Let's Encrypt-like automated infrastructure that charge a small subscription fee for certificates. I'd pay $1-$3/m or so for preventing a mono-culture + big attack surface, but don't really want to give up the convenience of Let's Encrypt.

I know there's a big barrier to entry for being a CA (as there should be), but it shouldn't be impossible.

>>packet+(OP)
> Kinda surprised there isn't a few CAs that set up Let's Encrypt-like automated infrastructure that charge a small subscription fee for certificates.

There are other ACME-compatible CA's.

>>Avaman+l
Oh? Examples?

>>packet+k1
https://zerossl.com/ is a popular alternative. https://www.buypass.com/ is another one I haven't personally tried.

>>capabl+b2
Also Google Trust Services has free certificates although you need a Google Cloud project for it.

>>ehhthi+q5
Not sure Google is a great alternative if you want to prevent further centralization of CAs :)

>>capabl+b2
Oh cool, I couldn't find those on Google. I'll check them out

>>packet+(OP)
I think that Let's Encrypt gets a lot of undeserved criticism for being the only major ACME-compatible CA. Yes, it's not so good to have monopolies on authenticity, but Let's Encrypt was founded by Mozilla, the EFF and the University of Michigan and was endorsed by the FSF.

That's a pretty good set of organisations when considering the general status of the internet, and a set that doesn't overlap with the major players in consumer technology (Apple, Microsoft and Google).