SSL certificate lifetimes are going down. Dates proposed. 45 days by 2027

Re:SSL certificate lifetimes are going down. Dates proposed.... by jmclnx on Tuesday October 15, 2024 @09:50AM (#41848591)

No kidding. Where I use to work, certs are a nightmare.

For example, some sites were closed and we asked the site owner to revoke their cert. We got "What does that mean ?", they had lost their private key.

Also other departments had certs that expired, they had no idea what to do. I left over a year ago, and someone who knows more about certs that I do left not long afterwards. I know many certs are due expire soon, good luck to them.

The point of this is I can see 45 day certs being a huge issue for that company. When I left they were looking into non-expiring certs. I have no idea what they ended up doing.

FWIW, this is a fortune 500 company.

[ Parent | on HN ]

Re:SSL certificate lifetimes are going down. Dates proposed.... by ozim on Tuesday October 15, 2024 @10:24AM (#41848956)

Well with ACME theory is that certs should renew automatically so no one should cate.

But to set it all up in F500 size company, that is totally different discussion and not only TLS certs but all kind of other cert auth that happens there.

[ Parent | on HN ]