343
Letsencrypt is under US jurisdiction. Is there a free-er alternative? (sopuli.xyz)
submitted 1 week ago by to c/selfhosted@lemmy.world
155 comments fedilink hide all child comments
 

I know that I can simply make my own private certificate authority that only I and my family trust. But is there some public provider like letsencrypt that is in a free-er part of the world than the US?

you are viewing a single comment's thread
view the rest of the comments
[–] 35 points 1 week ago (12 children)

I've been using ZeroSSL for over 5 years and can attest that they are friendly in that I have literally never seen or heard from them.

I've set up and cancelled multiple domains in this time, and have had one domain running for the entirety of my time with ZeroSSL.

I don't think you (OP) are gonna find much better than a for-profit business with a good track record if you're unwilling to use Letsencrypt.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 12 child comments
    •
  • [–] 4 points 1 week ago (10 children)

    They do sound good, but it's worth pointing out that for a LE equivalent, unlimited 90 day certs, ZeroSSL would cost 180 Euro per year, that's 15 per month. I couldn't find another registry with a comparable offer. They always follow the ancient model of paying for every cert or getting a wildcard cert you have to manually install everywhere. To me, that model is dead. Automatic provisioning and renewal of certs is a must.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 10 child comments
    •
  • [–] 6 points 1 week ago (9 children)

    What? I'm not paying a dime and I'm not manually inserting certificates.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 9 child comments
    •
  • [–] 5 points 1 week ago (2 children)

    I'm just repeating what their website says.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 8 points 1 week ago (1 child)

    I think you should look deeper. Quick google search gave me

    https://zerossl.com/features/acme

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 1 week ago* (last edited 6 days ago) (5 children)

    I assume you are correct and anybody can get a cert (with max. 1 wildcard presumably) for (again presumably) one site for free?
    This @state_electrician is very insistent; do you have any idea what exactly costs €15/month (according to them)? What could they mean by "LE (LetsEncrypt) equivalent"?
    They seem to claim that the free cert offer is only for a limited time?

    edit:
    no, they explained themselves. Apparently LE gives as many free certs for as many domains as you want to any one user.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 1 point 1 week ago (4 children)

    I am referring to this: https://zerossl.com/pricing

    Under the section "ZeroSSL Certificates" it says for the free tier "3 90-Day Certificates" and for the cheapest paid option at 15 Euro per month "∞ 90-Day Certificates" (∞ being the infinity sign). The latter is what I currently get for free from Let's Encrypt. So to get the same kind of service, I would have to pay ZeroSSL about 180 Euro a year. Which is something I am currently not willing to do, as all my ~40 certificates are only for myself.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 2 points 6 days ago (3 children)

    I think there is some confusion because I have had more than 4 domains at one time and they did not complain about it. 2 of them were wildcards. Possibly a "90 day certificate" is something specific that they are offering?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 1 point 6 days ago (2 children)

    Wait, you're getting free SSL certs that don't have to be renewed (albeit automated) every 90 days?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 6 days ago

    I'd be interested in that too; I've always avoided ZeroSSL so far because I have 80 (sub)domains. I manage 7 root domains as wildcards and 6 as individual certificates—that always sounded like it would be unaffordable for me.

  • permalink
  • fedilink
  • source
  • parent