Let's Encrypt

From Sympl Wiki
Jump to navigation Jump to search

Let's Encrypt, sometimes referred to as 'LE', is a nonprofit Certificate Authority which provides free TLS (HTTPS) certificates to hundreds of millions of websites, and is sponsored by a large number of groups including the EFF, Internet Society, AWS, Chrome, Cisco and Mozilla.

Where legacy certificate authorities did manual checks and used emails to specific addresses to validate domain ownership, Let's Encrypt use automated verification using acme challenge or DNS validation, which are arguably more secure and allow shorter certificate periods, ensuing ownership has not changed in the interim.

Let's Encrypt certificates are retrieved automatically by Sympl using the sympl-ssl tool, and renewed automatically when there are less than 28 days remaining on the certificate.