News for hackers. Stuff that matters.

A comment on Cyber.mil serving file downloads using TLS certificate which expired 3 days ago. Parent comment

Re:Cyber.mil serving file downloads using TLS certificate wh... by alexjplant on Monday March 23, 2026 @02:19PM (#47493208)
ACME [1] has been a thing for more than 10 years and has been a stable specification for 7 years. There were similar vendor-specific implementations that preceded it. The DoD has employed none of these solutions for their flagship infosec public web presence. If they were going to automate this then they surely would have done so by now. The reasons why are opaque but people who have experience working in this space might be able to make an educated guess.

[1] https://en.wikipedia.org/wiki/Automatic_Certificate_Manageme...

[ Parent | on HN ]
Re:Cyber.mil serving file downloads using TLS certificate wh... by charcircuit on Monday March 23, 2026 @05:05PM (#47495116)
It may be a thing, but it is not mandatory and issues can still happen that cause the automatic renewal to fail. There still exist holes where someone can have a cert for their site expire.
[ Parent | on HN ]