I’m curious what the benefits are of paying for SSL certificates vs using a free provider such as letsencrypt.

What exactly are you trusting a cert provider with and what are the security implications? What attack vectors do you open yourself up to when trusting a certificate authority with your websites’ certificates?

In what way could it benefit security and/or privacy to utilize a paid service?

And finally, which paid SSL providers are considered trustworthy?

I know Digicert is a big player, but their prices are insane. Comodo seems like a good affordable option, but is it a trustworthy company?

  • N0x0n
    link
    fedilink
    English
    arrow-up
    1
    ·
    3 months ago

    Can’t argue against that.

    However, I prefer local domain names accessible via Wireguard with self-signed certs. I like to understand how everything works under the hood !

    Also, I’m broke AF and buying a domain name (even cheap ones) are out of my budget :(.

    • qaz@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      edit-2
      3 months ago

      Numeric .xyz domains only cost $1 a year. They’re not great for things like mail because they’re often used by spammers (probably because of the price), but it’s great for cheap signed DNS hostnames.

      I point it to the server on my local network and use Wireguard to connect myself.