I know that I can simply make my own private certificate authority that only I and my family trust. But is there some public provider like letsencrypt that is in a free-er part of the world than the US?

  • state_electrician@discuss.tchncs.deEnglish
    42·
    18 hours ago

    They do sound good, but it’s worth pointing out that for a LE equivalent, unlimited 90 day certs, ZeroSSL would cost 180 Euro per year, that’s 15 per month. I couldn’t find another registry with a comparable offer. They always follow the ancient model of paying for every cert or getting a wildcard cert you have to manually install everywhere. To me, that model is dead. Automatic provisioning and renewal of certs is a must.

      • A_norny_mousse@piefed.zipEnglish
        1·
        3 hours ago

        I assume you are correct and anybody can get a cert (with max. 1 wildcard presumably) for (again presumably) one site for free?
        This @state_electrician is very insistent; do you have any idea what exactly costs €15/month (according to them)? What could they mean by “LE (LetsEncrypt) equivalent”?
        They seem to claim that the free cert offer is only for a limited time?

        edit:
        no, they explained themselves. Apparently LE gives as many free certs for as many domains as you want to any one user.

        • state_electrician@discuss.tchncs.deEnglish
          21·
          13 hours ago

          I am referring to this: https://zerossl.com/pricing

          Under the section “ZeroSSL Certificates” it says for the free tier “3 90-Day Certificates” and for the cheapest paid option at 15 Euro per month “∞ 90-Day Certificates” (∞ being the infinity sign). The latter is what I currently get for free from Let’s Encrypt. So to get the same kind of service, I would have to pay ZeroSSL about 180 Euro a year. Which is something I am currently not willing to do, as all my ~40 certificates are only for myself.

          • drkt@scribe.disroot.orgEnglish
            2·
            11 hours ago

            I think there is some confusion because I have had more than 4 domains at one time and they did not complain about it. 2 of them were wildcards. Possibly a “90 day certificate” is something specific that they are offering?

              • Tealk@rollenspiel.forumEnglish
                1·
                2 hours ago

                I’d be interested in that too; I’ve always avoided ZeroSSL so far because I have 80 (sub)domains. I manage 7 root domains as wildcards and 6 as individual certificates—that always sounded like it would be unaffordable for me.