News for hackers. Stuff that matters.
Re:SSL certificate lifetimes are going down. Dates proposed.... by ndsipa_pomu on Tuesday October 15, 2024 @06:57AM (#41847228)
Reduced certificate expirations also enhances the security of the internet as it reduces the window of opportunity for nefarious uses. It could possibly reduce their number of support calls from someone who's taken over from a previous admin and is now faced with an undocumented manual process to replace certs in a hurry as their website has an expired cert.

Personally, I don't see the problem with short expiry dates, though less than a month would be too short in my opinion.

Re:SSL certificate lifetimes are going down. Dates proposed.... by tsimionescu on Tuesday October 15, 2024 @01:34PM (#41850948)
A window of opportunity of 45 days is not significantly different from one of 90 or 365 days. If it's the only protection you have from a leaked private key, then a while lot of people are gonna get MITMed.