[AusNOG] Lets Encrypt

[Jeremy Visser]

On 19/11/14 12:34, Peter Tiggerdine wrote:
> cacert.org as well which seems more transparent about the processes
> and policy that govern their setup. Not use if their root ca cert
> appears in all the browsers/Operating Systems which is always the
> hard part.

CAcert is untrusted by practically nobody by default.  They are seriously understaffed, underfinanced, and struggled for years to get through any kind of audit process.

StartSSL free certificates on the other hand are trusted by default on all major OSes and browsers.  They are powered by StartCom, a commercial company with plenty of paid services, so there is a different motivation and backing there compared to CAcert.

Scarily enough, the StartSSL website has free "certificate conversion" tools.  Paste your certificate and private key, and convert your certificate to a different format.

They are also based out of Israel.  (Coincidence?  I hope so.)