Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

StartSSL, WoSign were the ones I've used. Very convenient services, much more convenient, compared to this certbot insanity.

I think that the rest of the world does not have much choice, because US uses their IT superiority to force political decisions to the rest of the world. I experienced that first-hand. When my country wanted to implement MITM to improve Internet usability for their citizens, US companies blacklisted government root certificate which disrupted this scheme and forced my country to roll back this plan. Now I have lots of websites completely blocked, instead of more careful and precise per-page blocking that would only be possible with MITM.

Hopefully, over time, China and Russia will destroy this superiority and will provide viable alternatives.





In what way do MITM certificates "improve Internet usability for their citizens"?

I just explained that. Basically government wants to block some specific webpage, say https://en.wikipedia.org/wiki/Nursultan_Nazarbayev. Without MITM, they'll end up with blocking the entire en.wikipedia.org domain, so citizens will lose access to a lot of information. With MITM, they'll be able to target precisely one page and I can read any other wikipedia article without issues.

And with MITM they can read literally all of your private internet traffic… That seems like a significantly worse tradeoff to just using a VPN to browse Wikipedia.

I had to deal with StartCom once many years ago, before LetsEncrypt. They had the rudest customer service I think I've ever encountered.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: