Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

There's this perception that businesses like to throw money away that they don't have to.

When LE came out they already had multi-year certificates, so they just used those. At the time many were convinced to switch from DV to EV [1] certificates. Since then the (alleged) benefits of EV certificates have vanished. [2]

Thus the argument to spend budget money on thing-we-can-get-for-free is very thin. Sure, there are some die-hards, but since they are literally wasting money they become fewer either each passing day.

[1] DV = Domain Verified which is what LE issues. EV is Extended Verification and costs several hundred $.

[2] Off the top of your head name 3 domins you visit that use an EV certificate. You can't because you can't tell if they do or not. And since no-one cared when you -could- tell, no-one complained when bring able to tell went away.

[3] LAN certificates was the last "hurdle" and that's been automated away as well. So now those spending money on CAs are just using up their budget, and not getting something for it.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: