News for hackers. Stuff that matters.

A comment on Shortening the Let's Encrypt Chain of Trust. Parent comment

Re:Shortening the Let's Encrypt Chain of Trust by profmonocle on Monday July 10, 2023 @11:01PM (#36675939)
> then 1/3 of those using Android would have encountered certificate errors while attempting to browse Let's Encrypt secured websites.

It was 50% when they announced the plan initially. :-|

[ Parent | on HN ]
Re:Shortening the Let's Encrypt Chain of Trust by chrisdotcode on Monday July 10, 2023 @11:46PM (#36676193)
So in 2019, you're saying that LE would have been fine with serving 50% of all Android users certificate errors, is that correct?

If so, what would make them suggest such a plan in the first place?

[ Parent | on HN ]
Re:Shortening the Let's Encrypt Chain of Trust by rlaager on Tuesday July 11, 2023 @12:08AM (#36676315)
Initially, they likely didn’t think they had a choice. The root that had cross-signed them was expiring. (And I wonder if anyone else was willing to cross-sign them.) It turns out that root expirations are handled differently (i.e. ignored) on some platforms, including the relevant old Android.
[ Parent | on HN ]