I know that I can simply make my own private certificate authority that only I and my family trust. But is there some public provider like letsencrypt that is in a free-er part of the world than the US?

  • A_norny_mousse@piefed.zipEnglish
    1·
    9 days ago

    This is why I never even started using Letsencrypt; looking at the fine print, you actually enter into some kind of contract with some US entity under US law, which I don’t want even if it’s the coolest of all FOSS foundations.

    Here’s a site that has some info:
    https://www.eurotoolkit.eu/categories/certificate-authority-ca
    I have used certum.pl for years and it looks like I might go back to them soon because my VPS provider doesn’t offer bundled certs anymore.

    I used to pay €40/year iirc.
    I suspect it’s gotten more expensive though.

    edit:
    oh looks like ZeroSSL are doing it letsencrypt-style with Acme protocol for €0.

    edit2:
    No, not more expensive. Some of the providers in the above link are labyrinthine and I couldn’t even find a Pricing section - usually a sign that it’s too expensive at least for a normal consumer - but others offer yearly certs for as little as €30 (taxes not included).

    edit3:
    Yeah some people are going to have a hard time accepting that a contract with a for-profit company under EU jurisdiction might be preferable to a contract with a non-profit under US jurisdiction.

    • drkt@scribe.disroot.orgEnglish
      1·
      9 days ago

      I’ve been using ZeroSSL for over 5 years and can attest that they are friendly in that I have literally never seen or heard from them.

      I’ve set up and cancelled multiple domains in this time, and have had one domain running for the entirety of my time with ZeroSSL.

      I don’t think you (OP) are gonna find much better than a for-profit business with a good track record if you’re unwilling to use Letsencrypt.

    • state_electrician@discuss.tchncs.deEnglish
      0·
      9 days ago

      ZeroSSL costs 180 per year for unlimited 90 day certs. I get the independence from US-based services, but I don’t want to drop that kind of money on my toy domains.

      • A_norny_mousse@piefed.zipEnglish
        0·
        9 days ago

        I think you misunderstood something there; they’re very explicitely offering free certs.

        I just went 90% through the process (I might need them anyhow later this year), it’s like this:
        What you say is a PRO feature, unlimited certs with one account, is not meant as “unlimited in time” but “unlimited number of certs at any given time”.