I know that I can simply make my own private certificate authority that only I and my family trust. But is there some public provider like letsencrypt that is in a free-er part of the world than the US?

  • Victor@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    6 hours ago

    a certificate for example.com

    also certify that it belongs to Example Ltd.

    I thought that was the whole point of a certificate, to show that the website belongs to the company? Or nah?

    • WhyJiffie@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      6
      ·
      5 hours ago

      It’s actually to prove that a web server belongs to (or is trusted by for delivering their content) a specific website.

      qualified certificates go a step further, by proving that a web server belongs to a specific company or a real person. but that’s costly, because verification is inherently more difficult.