[kwlug-disc] Let's Encrypt out of beta

[Kirk Zurell]

(Jumping in here unbidden)

A less fragile model is a co-op: members band together to pay for the
software and infrastructure to administer certificates (or other
identity products). It's not vanilla not-for-profit, it's not
government, but it's not flighty private interests who can suddenly
lose interest either.

Paul's observation of the "fragile" structure under Let's Encrypt is
not FUD, not for technology that amounts to civic infrastructure (ie.,
it's not completely voluntary). I'm the person who first(?) mouthed
off about LE at The Working Centre, thinking primarily of immediate
practical demands, but its organizational provenance needs a careful
eye kept on it.

Kirk

On Fri, Apr 15, 2016 at 8:24 AM, Jason Locklin <locklin.jason at gmail.com> wrote:
>
>
> On 14/04/16 11:06 PM, Paul Nijjar via kwlug-disc wrote:
>> On Thu, Apr 14, 2016 at 08:21:28AM +0000, B.S. via kwlug-disc wrote:
>>> ----- Original Message -----
>> Maybe a better word than "dangerous" is "fragile".
>>
>> None of this is to suggest that I am uninterested in Let's Encrypt. We
>> have not deployed it at work, but I think we will. I will not be
>> trusting in its longevity, however.
>
> I'm curious, Paul, what model you think would be less fragile? Solely
> private-donation funded projects are certainly not more stable, and
> neither are un-funded works done purely out of interest by the
> developer. Directly commercialized projects have pretty much the same
> expected lifespan as FLOSS projects, disappearing all the time.
>
> At this point, a FLOSS project, like let's encrypt, with a long list of
> commercial sponsors and private donors and a low overhead is easily as
> trustworthy as any other project or commercial service. Unless there is
> some other piece of information, calling it fragile can't be justified
> as much more than FUD.
>
>
> _______________________________________________
> kwlug-disc mailing list
> kwlug-disc at kwlug.org
> http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
>



-- 
Kirk Zurell
Kitchener, Ontario, Canada
kirk at kirk.zurell.name
http://leadershipwaterlooregion.org (class of 2012)