News for hackers. Stuff that matters.
Re:TLS Certificate Lifetimes Will Officially Reduce to 47 Days by bshacklett on Tuesday April 15, 2025 @11:37AM (#43694363)
How does this cut off the grassroots internet?
Re:TLS Certificate Lifetimes Will Officially Reduce to 47 Days by chromanoid on Tuesday April 15, 2025 @11:44AM (#43694478)
It makes end to end responsibility more cumbersome. There were days people just stored MS Frontpage output on their home server.
Re:TLS Certificate Lifetimes Will Officially Reduce to 47 Days by icedchai on Tuesday April 15, 2025 @11:57AM (#43694715)
Many folks switched to Lets Encrypt ages ago. Certificates are way easier to acquire now than they were in "Frontpage' days. I remember paying 100's of dollars and sending a fax for "verification."
Re:TLS Certificate Lifetimes Will Officially Reduce to 47 Days by chromanoid on Tuesday April 15, 2025 @12:11PM (#43694917)
I agree, but I think the pendulum just went too far on the tradeoff scale.
Re:TLS Certificate Lifetimes Will Officially Reduce to 47 Days by whs on Tuesday April 15, 2025 @10:05PM (#43700652)
Do they offer any long term commitment for the API though. I remembered that they were blocking old cert manager clients that were hammering their server. You can't automate that (as it could be unsafe, like Solarwinds) and they didn't give one year window to do it manually either.
Re:TLS Certificate Lifetimes Will Officially Reduce to 47 Days by icedchai on Tuesday April 15, 2025 @10:30PM (#43700796)
You do have a point. I still feel that upgrading your client is less work than manual cert renewals.
Re:TLS Certificate Lifetimes Will Officially Reduce to 47 Days by ezfe on Wednesday April 16, 2025 @04:21PM (#43709943)
I've done the work to set up, by hand, a self-hosted Linux server that uses an auto-renewing Let's Encrypt cert and it was totally fine. Just read some documentation.