> Not this time. The technical problems are easy to solve. For decades, users of SSH have had a system (save the certificate permanently the first time you connect, and warn if it ever changes) that is optimal in a sense
It's a fundamental problem, not easy to solve. And the Letsencrypt strategy already does things the SSH way: trust blindly on the first time (thus being vulnerable to MITM), and if you were not MITM'd the first time, then you're pretty safe during future connections.
Certbot just automates the "trust blindly" part because configuring a web server cert is a little more complicated than an invocation of ssh.
In fact, if we really did things the SSH way, it would be each user blindly trusting each website for the first visit.
You can still get paid certs, but the max validity period is shrinking, to 45 days in 2027 https://blog.nameshield.com/blog/2024/10/17/ssl-tls-certific...