a new free smime service, but...

Robert J. Hansen rjh at sixdemonbag.org
Thu Oct 24 15:19:14 CEST 2019


> Why doesn't Let's Encrypt offer this service?

Because it's outside the scope of what Let's Encrypt exists to do, which
is make it easy to provide HTTPS support to small websites.

SMTP is *totally* outside of Let's Encrypt's mission.  If you've got a
problem with that, take it up with Let's Encrypt.  They're pretty
responsive on Twitter at https://twitter.com/letsencrypt.

> Why isn't CAcert after years of participation listed as trusted CA in root
> stores?

Because CACert hasn't been able to comply with Mozilla's Root Store
Policy.  Chrome has its own root store policy, as does Internet
Explorer.  CACert hasn't been able to dot the is and cross the ts for
any of them, AFAIK.

https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/



More information about the Gnupg-users mailing list