HACKER Q&A
📣 randompeach

What should a Alternative to LetsEncrypt offer


In the name of resilience, what should a true alternative to Lets Encrypt offer for you.

Besides the following basic requirements: - feature complete (offering both simple domain and wildcard support via ACME) - registered non-profit - not inside the US (simply based on resillience) - like lets encrypt community driven


  👤 toast0 Accepted Answer ✓
There's already other CAs that (optionally) use ACME to issue. As I understand it from the mod_md readme [1], Buypass basically works (without must staple), Sectigo and ZeroSSL work too, but require an account to be setup.

Are these true alternatives? If not, why not? I don't know where these companies reside.

[1] https://github.com/icing/mod_md?tab=readme-ov-file#known-iss...


👤 cpach
How would you fund such an operation?

It’s not extremely expensive, but it needs a bit of funding.

https://community.letsencrypt.org/t/what-it-costs-to-run-let...


👤 kevsamuel
Using a different set of libraries as dependencies.

👤 nik736
Why are those basic requirements and what has being based in the US to do with resillience?

👤 cranberryturkey
wildcard subdomains

👤 KomoD
It should have money, a shit ton of it.