Private Diffie/Helman Tokens
Private Diffie/Helman Tokens
Posted Dec 5, 2024 22:34 UTC (Thu) by dskoll (subscriber, #1630)In reply to: Private Diffie/Helman Tokens by eharris
Parent article: Let's Encrypt sets date for ending OCSP support
You don't need Let's Encrypt if your communications are purely internal.
However, if you have a public facing server that needs to "prove" its identity, to the extent that such proof boils down to "Let's Encrypt has verified as best it can that this server is really foo.example.com, or is in the *.example.com domain, and hey, we hope the server admins haven't negligently leaked their private key...", then you need Let's Encrypt or some other CA.