Google wants to reduce lifespan for HTTPS certificates to one year

Re:Google wants to reduce lifespan for HTTPS certificates to... by ferzul on Saturday August 17, 2019 @11:51PM (#20728128)

but that's solved, not by avoiding the automated, short term, machine aided certificate generation by Acme Bot and related tools, but by spreading them to other CAs.

And every time someone says, can't everyone just use LetsEncrypt, they mean, why haven't they automated it?

[ Parent | on HN ]

Re:Google wants to reduce lifespan for HTTPS certificates to... by throw0101a on Sunday August 18, 2019 @07:49PM (#20733706)

ACME only became an RFC in March 2019: it's a Johnny Come Lately to the cert world. And it's not like it was the first/only game in town for cert issuing APIs:

* https://en.wikipedia.org/wiki/Enrollment_over_Secure_Transpo...

* https://en.wikipedia.org/wiki/Simple_Certificate_Enrollment_...

ACME is the third kick at the can AFAICT. Some people could perhaps be excused for thinking ACME/LE was just another flash in the pan.

[ Parent | on HN ]