← Back to context

Comment by ranger_danger

16 hours ago

Yes I understand all of that, but I still choose to trust free services less.

Of course the (more secure?) alternative would be to generate self-signed certs, but for customer-facing sites that's a big UX problem.

> Yes I understand all of that, but I still choose to trust free services less.

Well, you can choose to do whatever you want, but given that you're posting to a public forum, it would be helpful if you actually explained your reasoning.

> Of course the (more secure?) alternative would be to generate self-signed certs, but for customer-facing sites that's a big UX problem.

It's not just a big UX problem, it's a big security problem, because the customers have no way of knowing if your certificate is actually valid.

  • > it would be helpful if you actually explained your reasoning.

    It's exceedingly clear that's not going to happen, and I think we all know why. Good reminder to anyone that anyone can just post here. Including people that logic-lessly think that paying a shitty third party that probably has a bad track record is somehow better than using LE. Like, this isn't a serious conversation?