News for hackers. Stuff that matters.

A comment on TLS Certificate Lifetimes Will Officially Reduce to 47 Days. Parent comment

Re:TLS Certificate Lifetimes Will Officially Reduce to 47 Days by gruez on Tuesday April 15, 2025 @12:20PM (#43695049)
>I mean, we do TOFU for SSH server certificates and nobody really seems to bat an eye at that.

Mostly because ssh isn't something most people (eg. your aunt) uses, and unlike with https certificates, you're not connecting to a bunch of random servers on a regular basis.

[ Parent | on HN ]
Re:TLS Certificate Lifetimes Will Officially Reduce to 47 Days by jchw on Tuesday April 15, 2025 @02:29PM (#43696692)
I'm not arguing for replacing existing uses of HTTPS here, just cases where you would today use self-signed certificates or plaintext.
[ Parent | on HN ]