Let’s Encrypt DST Root CA X3 Expiration – September 2021

Re:Let’s Encrypt DST Root CA X3 Expiration – September 2021 by josephcsible on Monday May 17, 2021 @11:35AM (#27184633)

Ha, good one. For the average company that breaks SSL, I expect something like this instead: "new corporate policy update: for security reasons, you're no longer allowed to visit HTTPS Web sites that use Let's Encrypt. If the Web site you want to visit still allows HTTP, that continues to be acceptable."

[ Parent | on HN ]

Re:Let’s Encrypt DST Root CA X3 Expiration – September 2021 by hannob on Monday May 17, 2021 @11:40AM (#27184708)

Ain't gonna happen. Let's Encrypt is too big to be ignored.

You can't practically use the web like that.

[ Parent | on HN ]

Re:Let’s Encrypt DST Root CA X3 Expiration – September 2021 by ethbr0 on Monday May 17, 2021 @03:00PM (#27186933)

> You can't practically use the web like that.

is looking at a corporate firewall blocking Stack Overflow right now

... "practical" is setting your expectations a bit high.

[ Parent | on HN ]

Re:Let’s Encrypt DST Root CA X3 Expiration – September 2021 by josephcsible on Monday May 17, 2021 @11:47AM (#27184801)

We know this, but I don't think everyone does. I'm sure that at least some places will learn this the hard way.

[ Parent | on HN ]

Re:Let’s Encrypt DST Root CA X3 Expiration – September 2021 by hannob on Monday May 17, 2021 @12:13PM (#27185129)

Maybe we just had a misunderstanding. What I was trying to say: Once this happens and everything breaks they will have an incentive to fix things quickly.

By no means do I expect vendors of "SSL inspection" devices to act any sooner than that.

[ Parent | on HN ]

Re:Let’s Encrypt DST Root CA X3 Expiration – September 2021 by 0xbadcafebee on Monday May 17, 2021 @12:13PM (#27185128)

They will just add an additional TLS proxy with a self-signed cert that ignores all validation. Security will be broken but users will be able to continue to do their work.

[ Parent | on HN ]