# What to do about the Let's Encrypt Change

**URL:** <https://forum.odk-x.org/t/what-to-do-about-the-lets-encrypt-change/978>\
**Category:** Development\
**Tags:** odk-x-sync-endpoint, community-call\
**Created:** [November 13, 2020, 3:51pm UTC](https://forum.odk-x.org/t/what-to-do-about-the-lets-encrypt-change/978 "2020-11-13T15:51:15Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![W\_Brunette](https://odkx.b-cdn.net/user_avatar/forum.odk-x.org/w_brunette/32/376_2.png) [@W\_Brunette](https://forum.odk-x.org/u/W_Brunette)\
**Post date:** [November 13, 2020, 3:51pm UTC](https://forum.odk-x.org/t/what-to-do-about-the-lets-encrypt-change/978/1 "2020-11-13T15:51:15Z")

</div>

ODK-X’s current default setup for Sync-Client uses Let’s Encrypt. Thoughts?

> **[Standing on Our Own Two Feet \[Updated\] - Let's Encrypt](https://letsencrypt.org/2020/11/06/own-two-feet.html)**
>
> Update, December 21 2020
> Thanks to community feedback and our wonderful partners at IdenTrust, we will be able to continue to offer service without interruption to people using older Android devices. We flagged the content of this blog post that is...

---

<div class="post-metadata">

**Author:** ![bengreen](https://odkx.b-cdn.net/user_avatar/forum.odk-x.org/bengreen/32/106_2.png) [@bengreen](https://forum.odk-x.org/u/bengreen)\
**Post date:** [November 14, 2020, 8:14am UTC](https://forum.odk-x.org/t/what-to-do-about-the-lets-encrypt-change/978/2 "2020-11-14T08:14:11Z")

</div>

I’ve added this topic to the community meeting for next week.

---

<div class="post-metadata">

**Author:** ![erobinson](https://odkx.b-cdn.net/letter_avatar_proxy/v4/letter/e/f04885/32.png) [@erobinson](https://forum.odk-x.org/u/erobinson)\
**Post date:** [November 17, 2020, 2:24pm UTC](https://forum.odk-x.org/t/what-to-do-about-the-lets-encrypt-change/978/3 "2020-11-17T14:24:10Z")

</div>

Definitely needs discussion. If it were 4.0 or below, I’d say no biggie, but there are still many 5.0 and higher devices out there - and still many brand new low cost devices running 7.x and lower.

---

<div class="post-metadata">

**Author:** ![W\_Brunette](https://odkx.b-cdn.net/user_avatar/forum.odk-x.org/w_brunette/32/376_2.png) [@W\_Brunette](https://forum.odk-x.org/u/W_Brunette)\
**Post date:** [December 1, 2020, 6:16pm UTC](https://forum.odk-x.org/t/what-to-do-about-the-lets-encrypt-change/978/4 "2020-12-01T18:16:33Z")

</div>

FYI… planned changes being discussed in this issue:

> <https://github.com/odk-x/tool-suite-X/issues/170>
>
> Let's Encrypt issued certificates will no longer be trusted on some devices, not…ably Android versions prior to 7.1.1, after September 30, 2021. ODK-X will introduce the following changes/features to minimize the impact:
> 
> \- \[\] Trust Let's Encrypt's root public keys (ISRG Root X1, ISRG Root X2) in ODK-X Services
> 
> \- \[\] Allow ODK-X Services to trust user provided certificates
> 
> \- \[\] Allow users to bring their own certificate in the Sync Endpoint setup script
> 
> Links
> \[https://docs.google.com/document/d/11KvB6XAkAp17bny4lPk4Uvobb5n6arbRT\_iXArbfOns/edit\](https://docs.google.com/document/d/11KvB6XAkAp17bny4lPk4Uvobb5n6arbRT\_iXArbfOns/edit)
> \[https://letsencrypt.org/2020/11/06/own-two-feet.html\](https://letsencrypt.org/2020/11/06/own-two-feet.html)