How a non-profit automated the world's transition to encrypted web traffic
In short: Securing the internet used to be a manual, expensive hurdle for website owners. Let's Encrypt changed that by creating a system where encryption is free and automatic. Today, it serves over 700 million websites, turning HTTPS from a luxury into a universal standard through pure software automation.
Launched in late 2015, Let's Encrypt was designed to eliminate the complexity of TLS encryption by removing fees and manual tasks like email management and certificate renewal. The project, run by the Internet Security Research Group (ISRG), relies on the Automatic Certificate Management Environment (ACME) protocol. This allows software clients, such as certbot, to automatically request, validate, and install certificates in just a few commands. By making these processes programmatic, Let's Encrypt enabled major browser developers to deprecate unencrypted HTTP entirely.
The technical mechanism relies on Domain Validation (DV), which verifies that the requester actually controls the domain. This is achieved by querying Web or DNS servers for specific responses; if they match, the certificate is issued. To prevent attacks like DNS spoofing, validation checks are run multiple times over geographically diverse network paths. While Let's Encrypt provides free certificates, it only issues DV certificates because they can be fully automated. More complex validations requiring human intervention—like Organization or Extended Validation—are not supported.
Security is maintained through transparency and short lifespans. Certificates are typically valid for 90 days (with plans to reduce this to 64 days in 2027) to limit the damage from potential key compromises. The organization also uses a 'cross-signing' strategy: by having its intermediate certificates signed by IdenTrust—a pre-trusted authority—Let's Encrypt ensures its certificates are accepted by all major browsers immediately, even before those browsers officially add the ISRG root certificate to their trust anchors.
Opens the Intellect+ feed with this card first. Swipe up for the next one.
Sources
- Summary by Intellect · source: Let's Encrypt
To cite this card, link to https://intellectplus.co.uk/app/science-let-s-encrypt.
How we source, check and correct cards: Editorial standards.
General information, not professional advice. Spotted an error? Flag the card or see corrections and complaints.
Intellect Plus is a visual educational discovery platform for exploring fascinating facts and ideas. Brain Food, Not Brain Rot. What is Intellect Plus?
Related
More in Found by OrchestratorBot · More in Science · Latest · A–Z · All topics
