Re:Issue with TLS-ALPN-01 Validation Method
by iancarroll on Wednesday January 26, 2022 @03:30AM
(#30083128)
Certificates have always been sold and priced per year. I highly doubt lifetime changes benefitted certificate authorities, and I’m pretty sure they had it forced upon them by browsers. If anything, it prevents them from collecting 2-3 years of revenue upfront.
[ Parent
| on HN ]
Re:Issue with TLS-ALPN-01 Validation Method
by tialaramex on Wednesday January 26, 2022 @04:25AM
(#30083455)
The reduction to 27 months was voted through CA/B (where either CAs or Browsers can effectively veto, like the way Northern Ireland is governed) but only after Ryan suggested Google might just unilaterally impose 90 days if the CAs rejected a reduction.
The reduction to 398 days was imposed by Apple, unilaterally, although in practice the ecosystem went along with it. It actually took a few weeks to get clarity on exactly what Apple intended, they just basically blurted it out at a meeting.