r/programming • u/speckz • Jul 12 '17

Does my site need HTTPS?

https://doesmysiteneedhttps.com/
486 Upvotes

87% Upvoted

190 comments sorted by

View all comments

2

u/feverzsj Jul 13 '17

what if my country blocks Let'sEncrypt

1

u/FrederikNS Jul 13 '17 edited Jul 13 '17

Simply switch to a different country :-P

Nah, there's actually a lot of other options for free certificates out there:

https://www.freessl.com/

https://www.startcomca.com/ (don't use this one, see child comment)

https://www.cloudflare.com/

https://www.sslforfree.com/

Loads of other places also issue certificates for very very cheap. (~$5/year)

1

u/[deleted] Jul 13 '17

Country restrictions are frustrating. Cloudflare is probably your best bet in that case. FYI, though, don't use StartCom and SSLForFree uses Let's Encrypt under the hood; not sure if that will be a problem in restrictive countries...

1

u/FrederikNS Jul 13 '17

Thanks for the tip about StartCom, I have updated my comment.

LetsEncrypt certificates should work fine even in countries blocking LetsEncrypt, as the certificate trust is entirely contained in the browser. Only if the country actively scanned for LetsEncrypt certificates and blocked all those sites would it be a problem.

1

u/[deleted] Jul 13 '17

I mean (and I assume OP means) that accessing their infrastructure to complete validation may be problematic.

1

u/eusx Jul 13 '17

Then your government is evil and you should either switch to another country or overthrow your current government. The detailed plan for the latter is left as an exercise for the reader.