Hacker News new | past | comments | ask | show | jobs | submit login

"ISRG will be operating a new root CA for this project."

Does that mean every client/browser will need to be updated to include the new CA? Or will it somehow be signed by other (competing) CAs?

I like the idea of this project, and I think it's a great thing for the Internet - I just worry that it will take a long time for it to be usable in practice.




No, it will be cross-signed and provide the chain so that it will work immediately in all mainstream browsers.


That's good to hear. Thanks!




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: