I know that I can simply make my own private certificate authority that only I and my family trust. But is there some public provider like letsencrypt that is in a free-er part of the world than the US?

  • A_norny_mousse@piefed.zip
    link
    fedilink
    English
    arrow-up
    41
    arrow-down
    10
    ·
    edit-2
    1 month ago

    This is why I never even started using Letsencrypt; looking at the fine print, you actually enter into some kind of contract with some US entity under US law, which I don’t want even if it’s the coolest of all FOSS foundations.

    Here’s a site that has some info:
    https://www.eurotoolkit.eu/categories/certificate-authority-ca
    I have used certum.pl for years and it looks like I might go back to them soon because my VPS provider doesn’t offer bundled certs anymore.

    I used to pay €40/year iirc.
    I suspect it’s gotten more expensive though.

    edit:
    oh looks like ZeroSSL are doing it letsencrypt-style with Acme protocol for €0.

    edit2:
    No, not more expensive. Some of the providers in the above link are labyrinthine and I couldn’t even find a Pricing section - usually a sign that it’s too expensive at least for a normal consumer - but others offer yearly certs for as little as €30 (taxes not included).

    edit3:
    Yeah some people are going to have a hard time accepting that a contract with a for-profit company under EU jurisdiction might be preferable to a contract with a non-profit under US jurisdiction.

    • state_electrician@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      10
      arrow-down
      2
      ·
      1 month ago

      ZeroSSL costs 180 per year for unlimited 90 day certs. I get the independence from US-based services, but I don’t want to drop that kind of money on my toy domains.

      • A_norny_mousse@piefed.zip
        link
        fedilink
        English
        arrow-up
        3
        ·
        1 month ago

        Which is in turn owned by a Swedish company.

        Can’t speak for OP, but for me it’s important that with e.g. Letsencrypt, I’m entering a contract under US law, and with ZeroSSL it’s under EU/Austrian law.