News for hackers. Stuff that matters.

A comment on Safari will no longer trust certs valid for more than 13 months. Parent comment

Re:Safari will no longer trust certs valid for more than 13 ... by derefr on Sunday February 23, 2020 @02:39PM (#22399015)
CAs have always been third-party services, though. Their APIs just used to involve humans talking to humans, rather than machines talking to machines. But that's no less of an operational dependency.

In a systems engineering plan (e.g. a NASA long-term project), both kinds of dependencies are considered liabilities that must be engineered for long-term reliability, fault-tolerance, etc.

[ Parent | on HN ]
Re:Safari will no longer trust certs valid for more than 13 ... by superkuh on Sunday February 23, 2020 @02:45PM (#22399061)
In the past browsers did not scaremonger so much about self-signed certs and search engines would index sites that were just http and this didn't effect their ranking.
[ Parent | on HN ]
Re:Safari will no longer trust certs valid for more than 13 ... by gruez on Sunday February 23, 2020 @03:19PM (#22399270)
>In the past browsers did not scaremonger so much about self-signed certs

That's necessary because people tend to be fixated on whatever task they're doing, and that causes them to click pass any warnings regardless of risk or comprehension.

[ Parent | on HN ]
Re:Safari will no longer trust certs valid for more than 13 ... by threeseed on Sunday February 23, 2020 @05:31PM (#22400011)
I can't tell if you are serious here.

You want self signed certs to be trusted and the web to move back to the days of HTTP where anybody could just intercept your traffic ?

[ Parent | on HN ]
Re:Safari will no longer trust certs valid for more than 13 ... by gsich on Sunday February 23, 2020 @05:42PM (#22400060)
That's not what he said.
[ Parent | on HN ]
Re:Safari will no longer trust certs valid for more than 13 ... by benibela on Sunday February 23, 2020 @05:17PM (#22399943)
Search engines have stopped listing http sites? Since when? I do not have https for my site (unclear if sourcefoge allows https for custom domains)
[ Parent | on HN ]
Re:Safari will no longer trust certs valid for more than 13 ... by luckylion on Sunday February 23, 2020 @02:53PM (#22399112)
It's different if you can "buy" a cert and be "safe" for a few years vs needing to renew it every 90 days. If they choose not to renew your cert, you're out after what ever time is left on your cert.

Let's lower that to 60 ... 45 ... 15 .. ah, let's just renew all certs every day, that's the only way to keep control centralized.

[ Parent | on HN ]