Let’s Encrypt isn’t responsible for stopping malware
“We think the certificate ecosystem is not the appropriate mechanism to police phishing and malware on the web. Other mechanisms like Safe Browsing, SmartScreen, or in this case the advertising network’s internal controls, are both more effective and more appropriate,” he told The Register in an email.
Well… yeah. Their whole shtick is that they just want more1 internet traffic to be encrypted. It makes sense- HTTPS connections don’t slow stuff down a noticeable amount, and it’s a big boost to privacy.
- If not ‘all’ ↩