You say you’d have more faith in my comments if I “cited actual concerns” (what, like how free and automated can engender fire and forget in the mind of a business person?) and didn’t have a conflict of interest (like seeing every single business client of the business I just bought all piled into the same source of trust?)…
The real problem with my post is I did not write it for you! I wrote it for the non-technical reader of The Startup.
Now consider: I could write a bash script to do the following:
- fire off curl on google’s search api with terms from various lines of business.
- traverse the results, again calling curl on each.
- grep the response for “cart”
- traverse the subset with a shopping cart and use openssl to get the cert info.
- calculate the days the cert if valid… looking for 90.
Now I have a set of ecommerce sites I know are “secured” by LE. Next step? Please read here: https://medium.com/swlh/what-is-the-value-of-an-extended-validation-ev-ssl-certificate-43f61edf53f3
Why didn’t I include that? Because I am not writing for the tech crowd.
Lastly, this: https://medium.com/swlh/why-lets-encrypt-is-a-really-bad-idea-part-ii-b05944c1c501
100k views and 1.5k claps in the face of the outrage of the super-senior-smartest-guys-in-the-room-pocket-protector-set-who-all-think-the-same maybe should reveal to us that there is a perspective on this we might want to consider? But no… we’re the smartest people in the room and the definition “stupid” is “the people who don’t think like us.”