It seems that <https://letsencrypt.org> is a new CA that we could use to provide certificates for domains. Two of the advertised features seem interesting:

- automatic renewal

- free of charge

It is sponsored by Mozilla and the EFF (and others) so it seems legit. It seems too good to be true, so I wonder whether there is a catch.

-erik