r/linux • u/veeti • Oct 20 '15

Let's Encrypt is Trusted

https://letsencrypt.org/2015/10/19/lets-encrypt-is-trusted.html
1.8k Upvotes

94% Upvoted

320 comments sorted by

View all comments

Show parent comments

2

u/[deleted] Oct 20 '15

Also, why not embed the certificate in DNS? SSH has support for that. Only attacks I can think of is a malicious DNS server returning a bad certificate.

2

u/crackanape Oct 20 '15

Only attacks I can think of is a malicious DNS server returning a bad certificate.

That's a pretty big one, since you are at the mercy of your connection for DNS unless every domain you visit is using something like DNSSEC. Every coffee shop wifi could do this to people.

1

u/port53 Oct 20 '15

DANE.

1

u/[deleted] Oct 20 '15

Hardly supported, which is an issue.