Usage of Let's Encrypt in Geminispace Has Collapsed (That's a Good Thing!)
WE previously explained (e.g. in February and last week) why Let's Encrypt isn't the way to go. Let's Encrypt is basically outsourcing of trust to entities that ought not be trusted and just because "modern" browsers (i.e. GAFAM) are 'happy' to do this doesn't mean it's a good thing to do.
Geminispace or Gemini Protocol (Geminispace is a collective name for the domains or the namespace that "groks" and communicates in Gemini Protocol) turns 5 in only 4 days from now. Its reliance on Let's Encrypt-sourced certificates was measured at 7.3% last week and now it's down to 7%. Who or what benefited? Some other Certificate Authority. That rose from 64 to 71 in the past week. Let's Encrypt in Geminispace (that's known to Lupa anyway) went down from 203 to 194. Quoting Lupa: "2500 (90.4 %) capsules are self-signed, 194 (7.0 %) use the Certificate Authority Let's Encrypt, 71 (2.6 %) are signed by another CA (may be not a trusted one)."
Ideally, or eventually, all capsules will sign their own certificates or have their own CA (which is effectively almost the same thing). Enough with the fake security cult (like having to ask Microsoft if it is "safe" to boot Linux).
We've moved on from an unencrypted Web to a cartel of prixe-fixing companies selling us a chunk of bytes (the founder of Ubuntu got rich that way). Now let's move forward towards a mostly self-hosted world, which ought not be expensive. █
