News for hackers. Stuff that matters.

A comment on TLS Certificate Lifetimes Will Officially Reduce to 47 Days. Parent comment

Re:TLS Certificate Lifetimes Will Officially Reduce to 47 Days by trothamel on Tuesday April 15, 2025 @11:26AM (#43694158)
I suspect it's to limit how long a malicious or compromised CA can impact security.
[ Parent | on HN ]
Re:TLS Certificate Lifetimes Will Officially Reduce to 47 Days by rat9988 on Tuesday April 15, 2025 @11:30AM (#43694238)
I think op is asking has there been many real case scenarios in practice that pushed for this change?
[ Parent | on HN ]
Re:TLS Certificate Lifetimes Will Officially Reduce to 47 Days by hedora on Tuesday April 15, 2025 @07:48PM (#43699796)
Equivalently, it also maximizes the number of sites impacted when a CA is compromised.

It also lowers the amount of time it’d take for a top-down change to compromise all outstanding certificates. (Which would seen paranoid if this wasn’t 2025.)

[ Parent | on HN ]
Re:TLS Certificate Lifetimes Will Officially Reduce to 47 Days by lokar on Wednesday April 16, 2025 @12:53PM (#43707632)
Mostly this. Today of a big CA is caught breaking the rules, actually enforcing repairs (eg prompt revocation ) is a hard pill to swallow.
[ Parent | on HN ]