https:\/\/letsencrypt.org<\/p>\n
Let\u2019s\u00a0Encrypt is a free, automated, and open certificate authority (CA), run for the public\u2019s benefit. Let\u2019s\u00a0Encrypt is a service provided by the Internet Security Research Group (ISRG).<\/p>\n
The key principles behind Let\u2019s\u00a0Encrypt are:<\/p>\n
\n
- Free:<\/b> Anyone who owns a domain name can use Let\u2019s\u00a0Encrypt to obtain a trusted certificate at zero cost.<\/li>\n
- Automatic:<\/b> Software running on a web server can interact with Let\u2019s\u00a0Encrypt to painlessly obtain a certificate, securely configure it for use, and automatically take care of renewal.<\/li>\n
- Secure:<\/b> Let\u2019s\u00a0Encrypt will serve as a platform for advancing TLS security best practices, both on the CA side and by helping site operators properly secure their servers.<\/li>\n
- Transparent:<\/b> All certificates issued or revoked will be publicly recorded and available for anyone to inspect.<\/li>\n
- Open:<\/b> The automatic issuance and renewal protocol will be published as an open standard that others can adopt.<\/li>\n
- Cooperative:<\/b> Much like the underlying Internet protocols themselves, Let\u2019s\u00a0Encrypt is a joint effort to benefit the community, beyond the control of any one organization.<\/li>\n<\/ul>\n<\/blockquote>\n
There was a talk at 31c3, which you can find here<\/a><\/p>\n