I'm curious what the benefits are of paying for SSL certificates vs using a free provider such as letsencrypt.

What exactly are you trusting a cert provider with and what are the security implications? What attack vectors do you open yourself up to when trusting a certificate authority with your websites' certificates?

In what way could it benefit security and/or privacy to utilize a paid service?

And finally, which paid SSL providers are considered trustworthy?

I know Digicert is a big player, but their prices are insane. Comodo seems like a good affordable option, but is it a trustworthy company?

you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 2 years ago (1 child)

That's frankly silly. Let's encrypt makes sure you control either the domain or a server the domain points to.

Almost all of the internet uses Let's encrypt

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 2 years ago

    Let’s encrypt makes sure you control either the domain or a server the domain points to

    ‘ Control’ but not own, which leaves it open to criminal activity. In contrast, a SSL certificate authority will ask for multiple pieces of ID for corporate registrants including articles of incorporation.

  • source
  • parent