I often wonder how much in skills development & money is lost because operators are legally allowed to block port 443 (or any port really) for their private customers.
This adds a level of complication on self-hosting that will discourage new learners.
I have a love-hate relationship with LetsEncrypt. Obviously it makes like simpler (and cheaper) for many use cases.
But it also contributed to radicalization of browsers about self signed certificates.
@santiago
True, we've been just discussing this in this thread a couple of days ago: https://social.librem.one/@m0xee/113107852627681950
While it's still possible to configure software created long ago, such as Firefox, to make working with self-signed certs more bearable, with newer software, such as rustls crate I mention in the linked post, it might no longer be true. In newer software working with HTTPS self-signed certs are mostly ostracised.
