Comment

Comment by schoen

I think the title of the submission is mis-editorialized. The comparison that my colleagues working on this project make is that it's like HTTPS Everywhere, or even more like the HSTS preload list, rather than like Let's Encrypt. I don't think you'll find the comparison to Let's Encrypt on the site itself.

(Edit: in addition to the site tester that you noticed, there is also a public policy list and some forthcoming tools to enforce STARTTLS on the client MTA side when delivering e-mail, preventing downgrade and MITM attacks.)

However, you can also use Let's Encrypt to make this more useful by getting a publicly-trusted certificate for the TLS service on your mail server, and then listing your mail server with this list!

The introductions my colleagues posted about this today are at

https://www.eff.org/deeplinks/2018/06/announcing-starttls-ev...

https://www.eff.org/deeplinks/2018/06/technical-deep-dive-st...

which will hopefully give a clearer explanation of what the service is meant for.

parent schoen 8 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton