343
Letsencrypt is under US jurisdiction. Is there a free-er alternative? (sopuli.xyz)
submitted 1 week ago by to c/selfhosted@lemmy.world
155 comments fedilink hide all child comments
 

I know that I can simply make my own private certificate authority that only I and my family trust. But is there some public provider like letsencrypt that is in a free-er part of the world than the US?

you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 1 week ago (10 children)

They do sound good, but it's worth pointing out that for a LE equivalent, unlimited 90 day certs, ZeroSSL would cost 180 Euro per year, that's 15 per month. I couldn't find another registry with a comparable offer. They always follow the ancient model of paying for every cert or getting a wildcard cert you have to manually install everywhere. To me, that model is dead. Automatic provisioning and renewal of certs is a must.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 10 child comments
    •
  • [–] 6 points 1 week ago (9 children)

    What? I'm not paying a dime and I'm not manually inserting certificates.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 9 child comments
    •
  • [–] 5 points 1 week ago (2 children)

    I'm just repeating what their website says.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 8 points 1 week ago (1 child)

    I think you should look deeper. Quick google search gave me

    https://zerossl.com/features/acme

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 1 week ago* (last edited 6 days ago) (5 children)

    I assume you are correct and anybody can get a cert (with max. 1 wildcard presumably) for (again presumably) one site for free?
    This @state_electrician is very insistent; do you have any idea what exactly costs €15/month (according to them)? What could they mean by "LE (LetsEncrypt) equivalent"?
    They seem to claim that the free cert offer is only for a limited time?

    edit:
    no, they explained themselves. Apparently LE gives as many free certs for as many domains as you want to any one user.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 1 point 1 week ago (4 children)

    I am referring to this: https://zerossl.com/pricing

    Under the section "ZeroSSL Certificates" it says for the free tier "3 90-Day Certificates" and for the cheapest paid option at 15 Euro per month "∞ 90-Day Certificates" (∞ being the infinity sign). The latter is what I currently get for free from Let's Encrypt. So to get the same kind of service, I would have to pay ZeroSSL about 180 Euro a year. Which is something I am currently not willing to do, as all my ~40 certificates are only for myself.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 2 points 6 days ago (3 children)

    I think there is some confusion because I have had more than 4 domains at one time and they did not complain about it. 2 of them were wildcards. Possibly a "90 day certificate" is something specific that they are offering?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 1 point 6 days ago (2 children)

    Wait, you're getting free SSL certs that don't have to be renewed (albeit automated) every 90 days?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 6 days ago

    I'd be interested in that too; I've always avoided ZeroSSL so far because I have 80 (sub)domains. I manage 7 root domains as wildcards and 6 as individual certificates—that always sounded like it would be unaffordable for me.

  • permalink
  • fedilink
  • source
  • parent