Let's Encrypt

For discussions about security.
Post Reply
Message
Author
labbe5
Posts: 2159
Joined: Wed 13 Nov 2013, 14:26
Location: Canada

Let's Encrypt

#1 Post by labbe5 »

https://www.eff.org/fr/deeplinks/2014/1 ... ts-encrypt

The University of Michigan is planning to put into use its new protocol, called Let's Encrypt. It was three years in the making, and now the developers are almost ready to implement it, at large.

As soon as this Summer, the general public could benefit from safer surfing on the Web.

Developments on the project is almost entirely due to the United States spying on its citizens and woldwide, via unencrypted communications on the internet.

Edward Snowden has unveiled the fact that any country now can spy on their citizens and worldwide.

Consequently, encrypting communications was urgently needed.

The University of Michigan was up to the task.

The link above will give you more information about Let's Encrypt.

Here's a short note :

Let's Encrypt, a totally free and automated certificate authority that will be launching in summer 2015. In order to let mainstream browsers seamlessly connect securely to your web site, you need a digital certificate. Next year, we'll provide you with that certificate at no charge, and, if you choose, our software will install it on your server in less than a minute. We've been pursuing the ideas that turned into Let's Encrypt for three years, so it was a great pleasure to be able to share what we've been working on with the world.

labbe5
Posts: 2159
Joined: Wed 13 Nov 2013, 14:26
Location: Canada

a more complete overview of the project Let' Encrypt

#2 Post by labbe5 »

http://www.eweek.com/security/lets-encr ... urity.html

Above is a more complete overview of the upcoming Let's Encrypt. For hackers, Let's Encrypt will be a roadblock to easy profit.

Anything that helps improve security, privacy and anonymity on the internet is welcomed.

The goal behind Let's Encrypt is to make it easier to get a proper Secure Sockets Layer/Transfer Layer Security (SSL/TLS) certificate that can be deployed to secure a Web server and its users. Let's Encrypt is aiming to deploy a free certificate authority at letsencrypt.orgthat will provide the certificate, as well as be a source to verify the certificate's integrity and authenticity. While the Let's Encrypt effort is being announced today, the free Certificate Authority service will not be generally available until early in 2015.

Eckersley added that the EFF realized that the lack of a free automated certificate authority was a roadblock for wider deployment of HTTPS. As such, the EFF started working with a team at the University of Michigan to create one.

The EFF's Eckersley is also optimistic about the impact that the Let's Encrypt effort will have. "After launch in 2015, we believe we should be able to protect millions of Websites in short order," he said.

That project alone is boding well for the future of internet. Encrypting internet is the key component to make it less likely hackers will profit from it.

In 2014, more and more corporations have reported hacker attacks involving millions of internet users entrusting their personal files to these corporations, making them vulnerable to all kind of abuse, identity theft being one of them.

Corporations could face justice in class actions in the years to come, since it is their responsibility to take care of personal files in their databases.

Hackers are only profitering from the fact corporations don't do enough to secure their files.

Millions, or even billions, in damages are expected.

Post Reply