Final Removal of Trust in WoSign and StartCom Certificates

Re:Final Removal of Trust in WoSign and StartCom Certificates by imron on Friday July 07, 2017 @08:34PM (#14723372)

> I'd like a three-year cert like letsencrypt.org uses for their site, instead of the 90-day ones they offer.

Why? The whole point of LE is to be able to automate renewals and if you automate it then the length of validity makes zero difference.

[ Parent | on HN ]

Re:Final Removal of Trust in WoSign and StartCom Certificates by CJefferson on Saturday July 08, 2017 @03:06AM (#14724488)

Then why doesn't letsencrypt.org eat their own dogfood, rather than have a 3 year certificate?

[ Parent | on HN ]

Re:Final Removal of Trust in WoSign and StartCom Certificates by imron on Saturday July 08, 2017 @05:35AM (#14724779)

At a guess, I'd say the reason is because Let's Encrypt (the service) didn't exist when they got their certificate.

From Wikipedia:

> Let's Encrypt is a certificate authority that launched on April 12, 2016

From Let's Encrypt's certificate

> Period of Validity > Begins On: 2015/2/4

I agree they should eat their own dogfood, but in the meantime, I'm eating their dogfood and it tastes pretty good.

[ Parent | on HN ]