Re:TLS Certificate Lifetimes Will Officially Reduce to 47 Days
by ryao on Thursday April 17, 2025 @03:20PM
(#43721027)
There is no need for a certificate from let’s encrypt. DANE lets you put your own self signed certificate into DNS and it should be trusted because DNS is authoritative, although DNSSEC should be required to make it secure.
[ Parent
| on HN ]
Re:TLS Certificate Lifetimes Will Officially Reduce to 47 Days
by tptacek on Thursday April 17, 2025 @04:11PM
(#43721655)
And yet no browser trusts it, and a single-digit percentage of popular zones (from the Tranco list) have signatures; this despite decades of deployment effort. Meanwhile, over 60% of all sites on the Internet have ISRG certificates.