Hacker News Reader

While I'm all for supporting Let's Encrypt, I think it showcases something very wrong with the www, which is a heavy reliance on centralized entities that eventually become single points of failure.

That being said, as long as we're on that space let's use HTTPS and support Let's Encrypt.

View on HN

The nature of (user friendly) CAs requires centralization. You can always sign your own certs and distribute them -- nothing is stopping you aside from a poor user experience.

Tor/OnionShare is at this point a better user experience than self-signed certificates.

well there would be DANE, but that will only solve encryption and not authorization (in the sense of google.com is really run by google inc.)

Reply on news.ycombinator.com