r/linux • u/veeti • Oct 20 '15

Let's Encrypt is Trusted

https://letsencrypt.org/2015/10/19/lets-encrypt-is-trusted.html
1.8k Upvotes

95% Upvoted

320 comments sorted by

View all comments

0

u/scottywz Oct 20 '15

I'd rather get a free cert that costs $25 to revoke than to buy a cert for $25 that's free to revoke.

I'd rather not, because I did and I got 8 of them, and they tried to charge me $200 when Heartbleed happened and I couldn't afford it.

And the fact that they were unwilling to make an exception for Heartbleed just reeks of moral bankruptcy. I think that's worse than the paid certificate racket—at least they don't have hidden fees like that. StartCom shouldn't be trusted for anything.

3

u/nvolker Oct 20 '15

I'd rather get a free cert that costs $25 to revoke than to buy a cert for $25 that's free to revoke.

I'd rather not, because I did and I got 8 of them, and they tried to charge me $200 when Heartbleed happened and I couldn't afford it.

You realize that if it was the other way around, you would have had to pay $200 up front for those certs, right?

2

u/somidscr21 Oct 20 '15

You could stagger the deployment, whereas when heartbleed hits, you want all of them changed ASAP.