Experimental News Clipping Site

Tag: certificate lifetimes

  • Slashdot: The EFF’s ‘Certbot’ Now Supports Six-Day Certs

    —

    by

    Kurt Seifried
    in

    Source URL: https://it.slashdot.org/story/25/04/14/0356212/the-effs-certbot-now-supports-six-day-certs?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: The EFF’s ‘Certbot’ Now Supports Six-Day Certs Feedly Summary: AI Summary and Description: Yes Summary: The text discusses the evolution of TLS certificate lifetimes, particularly the shift towards shorter certificates initiated by Let’s Encrypt. This trend emphasizes enhanced security through automation and reduced risk associated with compromised private keys,…

  • Hacker News: How to distrust a CA without any certificate errors

    —

    by

    Kurt Seifried
    in

    Source URL: https://dadrian.io/blog/posts/sct-not-after/ Source: Hacker News Title: How to distrust a CA without any certificate errors Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text discusses the concept of “distrust” in the context of certificate authorities (CAs) that issue HTTPS certificates, emphasizing changes in the management of certificate trustworthiness due to compliance failures…

  • Hacker News: Let’s Encrypt is offering 6-day and IP address certs

    —

    by

    Kurt Seifried
    in

    Source URL: https://letsencrypt.org/2025/01/16/6-day-and-ip-certs/ Source: Hacker News Title: Let’s Encrypt is offering 6-day and IP address certs Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the introduction of short-lived certificates in the Web PKI ecosystem to enhance security. It emphasizes how these certificates, with lifetimes as short as six days, can mitigate…

  • Hacker News: Avoiding downtime: modern alternatives to outdated certificate pinning practices

    —

    by

    system automation
    in

    Source URL: https://blog.cloudflare.com/why-certificate-pinning-is-outdated Source: Hacker News Title: Avoiding downtime: modern alternatives to outdated certificate pinning practices Feedly Summary: Comments AI Summary and Description: Yes Summary: The text critically examines the practice of certificate pinning in the evolving landscape of Public Key Infrastructure (PKI). It highlights the risks and management challenges associated with keeping pinned certificates…