Source URL: https://www.theregister.com/2025/04/14/ssl_tls_certificates/
Source: The Register
Title: New SSL/TLS cert to live no longer than 47 days by 2029
Feedly Summary: IT admins, get ready to grumble
CA/Browser Forum – a central body of web browser makers, security certificate issuers, and friends – has voted to cut the maximum lifespan of new SSL/TLS certs to just 47 days by March 15, 2029.…
AI Summary and Description: Yes
Summary: The CA/Browser Forum’s decision to limit the maximum lifespan of new SSL/TLS certificates to 47 days will significantly impact IT administration practices, necessitating more regular certificate renewal processes. This change emphasizes a trend towards tighter security measures in the realm of information security.
Detailed Description: The recent decision by the CA/Browser Forum reflects an evolving landscape in the realm of web security and certificate management. Here are the key points and implications of this development:
– **Reduced Lifespan of Certificates**: Starting March 15, 2029, newly issued SSL/TLS certificates will have a maximum validity period of just 47 days. This is a substantial reduction from the current industry norm of up to two years.
– **Impact on IT Administrators**: IT teams will need to adapt to a more frequent renewal cycle, which increases operational overhead and may lead to increased administrative burdens. The move is likely to generate challenges in managing certificate renewal processes, especially for organizations with a large number of domains or services.
– **Enhanced Security Protocols**: The decision highlights a shift towards more stringent security protocols in an environment that increasingly prioritizes the protection of sensitive data. Shorter certificate lifespans can potentially minimize the window of exposure in the event of certificate compromise.
– **Compliance and Governance Considerations**: Organizations will need to adjust their compliance strategies related to certificate management. This includes ensuring they have the necessary infrastructure and automation in place to renew certificates more frequently without service disruption.
– **Broader Implications for Information Security**: This shift underscores the continuous evolution of best practices in information security, especially in how authentication and encryption are managed in a digital landscape rife with threats.
Overall, the CA/Browser Forum’s decision serves as a catalyst for businesses to rethink their certificate management strategies, emphasizing the necessity for robust processes that align with security, compliance, and operational efficiency in the face of changing standards.