Encryption project issues first free SSL/TLS certificate

Let's Encrypt plans to distribute certificates more widely in the next couple of months

A project that aims to increase the use of encryption by giving away free SSL/TLS certificates has issued its first one, marking the start of its beta program.

The project, called Let's Encrypt, is run by the Internet Security Research Group (ISRG) and backed by Mozilla, the Electronic Frontier Foundation (EFF), Cisco and Akamai, among others.

Let's Encrypt plans to distribute free SSL/TLS (Secure Socket Layer/Transport Layer Security) certificates, which encrypt data passed between a website and users. The use of SSL/TLS is signified in most browsers by "https" and a padlock appearing in the URL bar.

Unencrypted web traffic poses a security risk. For example, an attacker could collect the web traffic of someone using a public Wi-Fi hotspot, potentially revealing sensitive data.

Selling SSL/TLS certificates is a big business; the certificates often aren't cheap and they expire after a certain time. The cost puts off some website owners from using encryption, particularly for less-trafficked sites.

Let's Encrypt aims to "revolutionize encryption on websites, making https implementation a seamless, no-cost option for anyone with a domain," wrote Rainey Reitman, the EFF's activism director.

The organization's first certificate is for one of its own domains, effectively a test run showing that the system works. It will begin issuing certificates to domains participating in its beta program, and then to more websites, in the next couple of months, wrote Josh Aas, ISRG's executive director, in a blog post.

For the first certificate to appear valid, users will have to install an ISRG root certificate in their browser or other client software. That's a temporary issue, as ISRG's root certificate will be cross-signed in about a month by IdenTrust, a Certificate Authority that is one of Let's Encrypt's primary sponsors.

Once that is in place, ISRG's certificates will be recognized as valid by nearly all browsers.

Major technology companies including Google, Yahoo and Facebook have made a strong push for broader using of encryption in light of government surveillance programs and burgeoning cybercrime.

Join the Good Gear Guide newsletter!

Error: Please check your email address.

Our Back to Business guide highlights the best products for you to boost your productivity at home, on the road, at the office, or in the classroom.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Jeremy Kirk

IDG News Service
Show Comments

Father’s Day Gift Guide

Most Popular Reviews

Latest News Articles

Resources

GGG Evaluation Team

Kathy Cassidy

STYLISTIC Q702

First impression on unpacking the Q702 test unit was the solid feel and clean, minimalist styling.

Anthony Grifoni

STYLISTIC Q572

For work use, Microsoft Word and Excel programs pre-installed on the device are adequate for preparing short documents.

Steph Mundell

LIFEBOOK UH574

The Fujitsu LifeBook UH574 allowed for great mobility without being obnoxiously heavy or clunky. Its twelve hours of battery life did not disappoint.

Andrew Mitsi

STYLISTIC Q702

The screen was particularly good. It is bright and visible from most angles, however heat is an issue, particularly around the Windows button on the front, and on the back where the battery housing is located.

Simon Harriott

STYLISTIC Q702

My first impression after unboxing the Q702 is that it is a nice looking unit. Styling is somewhat minimalist but very effective. The tablet part, once detached, has a nice weight, and no buttons or switches are located in awkward or intrusive positions.

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?