News for hackers. Stuff that matters.
Re:Upcoming Changes to Let's Encrypt Certificates by shim__ on Monday December 15, 2025 @04:37PM (#46281069)
Could have just kept using OSCP stapling
Re:Upcoming Changes to Let's Encrypt Certificates by ekr____ on Monday December 15, 2025 @04:49PM (#46281213)
Basically OCSP stapling (more specifically must-staple) is isomorphic to short-lived certificates.
Re:Upcoming Changes to Let's Encrypt Certificates by alwillis on Tuesday December 16, 2025 @11:29AM (#46290577)
OSCP enables every website someone visits to be tracked; see https://news.ycombinator.com/item?id=46290033
Re:Upcoming Changes to Let's Encrypt Certificates by SkiFire13 on Tuesday December 16, 2025 @02:03PM (#46292812)
OSCP stapling (which OP mentions) is supposed to fix that though.