News for hackers. Stuff that matters.

A comment on SSL certificate lifetimes are going down. Dates proposed. 45 days by 2027. Parent comment

Re:SSL certificate lifetimes are going down. Dates proposed.... by chippiewill on Tuesday October 15, 2024 @04:19AM (#41846204)
It's because of the risk of leaked private keys being used for a long period of time.

Additionally, short renewal periods encourages automation which is more secure than a manual process.

Password rotation is discouraged because usually it means that users will create weaker passwords.

[ Parent | on HN ]
Re:SSL certificate lifetimes are going down. Dates proposed.... by gsich on Tuesday October 15, 2024 @05:40PM (#41853401)
Private keys for certs can and are being reused.
[ Parent | on HN ]