Shortening the Let's Encrypt Chain of Trust

Re:Shortening the Let's Encrypt Chain of Trust by cramjabsyn on Tuesday July 11, 2023 @06:10AM (#36678797)

Its not even 10 years old. The hardware is aging but the only reason its “outdated” is due to a software lifecycle forced by one or more corporate entities. These are an obvious tool to force sales/upgrades.

I’d be nice if this community weren’t so quick to defend planned obsolescence, especially at a 2-3 year pace.

[ Parent | on HN ]

Re:Shortening the Let's Encrypt Chain of Trust by SkiFire13 on Tuesday July 11, 2023 @06:46AM (#36679116)

Note that in this particular case you can still use alternative browsers that come with updated root CAs.

[ Parent | on HN ]

Re:Shortening the Let's Encrypt Chain of Trust by Karunamon on Tuesday July 11, 2023 @08:02AM (#36679777)

This will still break anything that uses a system webview.

[ Parent | on HN ]

Re:Shortening the Let's Encrypt Chain of Trust by hunter2_ on Tuesday July 11, 2023 @10:21AM (#36681365)

And also any apps that make API calls over HTTPS, regardless of webview, right? I believe they cannot use HTTP, only HTTPS. However, I'm unsure whether they can disable certificate verification. Presumably not, for the same reason...

[ Parent | on HN ]

Re:Shortening the Let's Encrypt Chain of Trust by KeepFlying on Tuesday July 11, 2023 @01:07PM (#36683935)

I think it was apple that forced the use of HTTPS in app APIs, not Google.

I don't believe android apps are locked to HTTPS as a rule, though obviously a lot of them likely don't have fallbacks.

[ Parent | on HN ]

Re:Shortening the Let's Encrypt Chain of Trust by DropInIn on Tuesday July 11, 2023 @09:52PM (#36689574)

Be nice if government out in laws to force at least a decade of "consistent operations" (it works as well at year 9 as year 1).

Theres really no reason that can't be done, it's not like phones have the amount of variety as PCs and MS and Linux have both managed to handle some much older hardware.

[ Parent | on HN ]