The Changelog: Software Development, Open Source

Securing the web with Let's Encrypt (Interview)

Apr 7, 2020

Join Josh Aas, Executive Director of the Internet Security Research Group behind Let's Encrypt, as he shares the incredible journey of making SSL certificates free and automated. He discusses the rapid surge in HTTPS adoption, highlighting a growth from 100 million to over a billion certificates issued. Josh emphasizes the vital role of collaboration in enhancing web security, the importance of universal encryption, and the ongoing efforts to ensure a safer internet for all users.

Ask episode

AI Snips

Chapters

Books

Transcript

Episode notes

INSIGHT

Cryptography Adoption

Cryptography adoption depends on ease of use, not brilliance.
Let's Encrypt prioritized automation and community client development.

ADVICE

Addressing Insecurity

Identify why people aren't adopting secure practices.
Create solutions that address the root cause of the problem directly.

ANECDOTE

HTTP/2 Security Debate

Josh Aas, while at Mozilla, advocated for HTTPS in HTTP/2.
Pushback arose due to cost concerns and proxy providers.

Get the Snipd Podcast app to discover more snips from this episode

Get the app

We’re talking with Josh Aas, the Executive Director of the Internet Security Research Group, which is the legal entity behind the Let’s Encrypt certificate authority. In June of 2017, Let’s Encrypt celebrated 100 Million certificates issued. Now, just about 2.5 years later, that number has grown to 1 Billion and 200 Million websites served. We talk with Josh about his journey and what it’s taken to build and grow Let’s Encrypt to enable a secure by default internet for everyone.

Join the discussion

Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!

Sponsors:

Linode – Our cloud of choice and the home of Changelog.com. Deploy a fast, efficient, native SSD cloud server for only $5/month. Get 4 months free using the code changelog2019 OR changelog2020. To learn more and get started head to linode.com/changelog.
Mux – Mux has done for video what Stripe has done for payments If you’re trying to build video into your app, you’ll have to decide between building it yourself or using an out-of-the-box platform. Mux simplifies all things video to an easy to use API. Get $50 in credit to play with at get.mux.com/changelog.
Pluralsight – Stay home. Skill up. For free. Pluralsight is totally free for the entire month of April! With over 7,000 courses from experts in software development, security, cloud and data there’s never been a better time to skill up. Learn more and get started at pluralsight.com/changelog
Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com.

Featuring:

Josh Aas – Website, GitHub, LinkedIn, X
Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X
Jerod Santo – GitHub, LinkedIn, Mastodon, X

Show Notes:

Let’s Encrypt Has Issued a Billion Certificates
Milestone: 100 Million Certificates Issued
Sponsors and donors of Let’s Encrypt
Internet Security Research Group
The Changelog #243: Let’s Encrypt the Web with Jacob Hoffman-Andrews
I’m a cog - Adam’s thoughts on cog mentality
Border Gateway Protocol

Something missing or broken? PRs welcome!