Shortening the Let's Encrypt Chain of Trust - Let's Encrypt

When Let’s Encrypt first launched, we needed to ensure that our certificates were widely trusted. To that end, we arranged to have our intermediate certificates cross-signed by IdenTrust’s DST Root CA X3. This meant that all certificates issued by those intermediates would be trusted, even while our own ISRG Root X1 wasn’t yet. During subsequent years, our Root X1 became widely trusted on its own.

[Songmu]

これ気づいてなかったけど、ついにLet's EncryptがIdenTrust依存から完全に脱却するのか。Androidの7.1より前のシェアは6%程度だから目を瞑ると。

[cohalz]

Android 7.1以降のシェアが93.9%まで上がったので証明書チェーンを今度こそ新しくできるのか