New Free CA

Interesting news from the crypto world. The aim is to remove any barriers for any website operator in having a real verifiable trusted certificate on the clearnet and bring TLS for all sites.

https://www.schneier.com/blog/archives/2014/11/a_new_free_ca.html

It does look quite interesting, but my exact concerns were expressed in the comments. Because all the providers are based in the USA, they can be compromised without being legally able to disclose it.

Maybe if they added a warrant canary of some sort? Maybe one where it invalidates all certs?

I don’t really know, but I can say that I very much enjoy seeing the project, and hopefully more like them will pop up. Getting encryption into the hands of more people is always a good thing in my book.