343
Letsencrypt is under US jurisdiction. Is there a free-er alternative? (sopuli.xyz)
submitted 1 week ago by to c/selfhosted@lemmy.world
155 comments fedilink hide all child comments
 

I know that I can simply make my own private certificate authority that only I and my family trust. But is there some public provider like letsencrypt that is in a free-er part of the world than the US?

you are viewing a single comment's thread
view the rest of the comments
[–] 16 points 1 week ago (15 children)

Certificate revocation is a joke and has been for over a decade

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 15 child comments
    •
  • [–] 8 points 6 days ago (3 children)

    Huh, FF on Android doesn't care.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 6 points 6 days ago (2 children)

    Most browsers don't, hence my calling revocation a joke.

    So many in this thread are up in arms about something the majority of browsers don't care about and have actively ignored for as long as I can recall

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 6 days ago (1 child)

    Yeah, I was just surprised bc the page explicitly lauds FF for checking revocation.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 6 days ago

    It may only be the desktop version, most mobile browsers aren't as feature complete as their desktop counterparts.

    But, given Google ripped revocation checking out of chromium, I wouldn't be surprised if they nerfed it in Android too...

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 6 days ago (5 children)

    Orion browser (maybe safari?) on iOS detected the revoked certificate, and asked me to confirm before accessing the website while warning about the dangers.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 2 points 6 days ago* (4 children)

    Does regular safari show the same prompt? Afaik, browsers on iOS are safari reskins, so I'm curious if they added his cert in directly again, or if the onion browser actually follows standards the os browser doesn't.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 2 points 6 days ago (3 children)

    Yes, but safari doesn't even let me ignore the warning, it has a explanation in detail, and only allows closing the website.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 1 point 6 days ago (2 children)

    You didn’t look hard enough. My router cert isn’t valid and I have to bypass the warning every time.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 6 days ago* (1 child)

    Maybe there’s a special case for local subnets?

    Here’s what shows up for me (in portuguese):

    Safari browser invalid certificate warning page.

    Clicking on more details, only allows me to check the certificate:

    Safari browser detailed information for invalid certificate warning.

    Here’s the translated details:

    Safari warns you when a website has an invalid certificate. This can happen if an attacker has compromised your connection. For your protection, you cannot visit this site. You can check later to see if the problem has been solved. You can also contact the site owner to report this error.

    To learn more, you can see the certificate.

    Said certificate:

    iOS invalid certificate information.

    Edit: on the latest iOS version (27) btw.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 1 week ago (3 children)

    And what if you need to get a new certificate?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •