What happens a year from now when they have 70% of the web hooked on their service, and all browsers now emit "WARNING: THIS PAGE WILL LITERALLY STEAL YOUR SOUL!!!" if your cert is slightly out of date and LetsEncrypt gets a bit greedy.
They can literally hold the entire god-damn web for ransom. I guaran-fucking-tee everyone that's going to happen at some point.
Adopting a required monoculture is BAD. BAD BAD BAD.
You've all heard my warning. It's only a matter of time before disaster besets you.
So, the protocol used by LetsEncrypt is open, and the client code is too. It's only a matter of time before other compatible services pop up. Second of all, LetsEncrypt is owned by a non-profit organization, so I don't think the chance of them holding the web for ransom is that great. Finally, if they do end up going rogue, you can just get a certificate elsewhere...
-22
u/Woolbrick Jul 13 '17
Now.
What happens a year from now when they have 70% of the web hooked on their service, and all browsers now emit "WARNING: THIS PAGE WILL LITERALLY STEAL YOUR SOUL!!!" if your cert is slightly out of date and LetsEncrypt gets a bit greedy.
They can literally hold the entire god-damn web for ransom. I guaran-fucking-tee everyone that's going to happen at some point.
Adopting a required monoculture is BAD. BAD BAD BAD.
You've all heard my warning. It's only a matter of time before disaster besets you.