Embed Notice

@ErikvanStraten @letsencrypt Yeah, a security certificate doesn’t guarantee who owns a particular end point, only that the entity that controls it has access to the private key that was used when the certificate was issued so as to mitigate MITM attacks.

As far as the Small Web is concerned, that’s a fact of life we have to contend with (I’d much prefer a decentralised system like DANE had succeeded) but I definitely don’t want more hurdles and/or information. You want to be anonymous on your personal site? Go right ahead. There’s no reason to prove that a person quite possible exploring an aspect of themselves at rainbows-and-butterflies.org is actually Jane Someone.

We just have different use cases, basically.