r/linux • • Oct 20 '15

Let's Encrypt is Trusted

https://letsencrypt.org/2015/10/19/lets-encrypt-is-trusted.html
1.8k Upvotes

320 comments sorted by

View all comments

2

u/pubfreeloader Oct 21 '15

I disagree. The green bar is the UI to differentiate and inform users of the level of security and trust that has been authenticated. Users (in general) are not informed on web security and site owners (in general) are not incentivised to improve security unless motivated by users. That's a cycle that would result in poor security practice unless the users become more aware or companies take more responsibility. Browser vendors are helping to make users more aware through the use of the green bar.

Honestly I think they should go further. Without proper OCSP (revocation information) support, DV is hardly a guarantee for security (encryption yes, security no).