yugcesofni
Re:Sysadmins rage over Apple's 'nightmarish' SSL/TLS cert lifespan cuts
on Wednesday October 16, 2024 @12:45PM (#41861168)
There's little evidence to support this afaict. Certs generated using non-default Roots are limited to 825 days in validity, more than twice the limit for those generated using the defautl roots.
Re:SSL certificate lifetimes are going down. Dates proposed. 45 days b...
on Wednesday October 16, 2024 @12:18PM (#41860905)
FWIW, a slight clarification here would be that the majority of TLS certificates are issued by CAs in the US, but the majority of CAs are not headquartered in the US.
Re:Sustaining Digital Certificate Security – Entrust Certificate Distrust
on Friday June 28, 2024 @02:20PM (#40823421)
Not just Safari, but all TLS connections instantiated on Apple OSes
Re:Why your 'A' grade SSL is 'outdated cryptography' on Chrome
on Thursday May 14, 2015 @11:43AM (#9545783)
I think this is the experience of a lot of people and good security folks are taking notice to try and help: https://blog.digicert.com/understanding-the-google-chrome-co...
Re:Show HN: Snitch.io – SSL auditing and alerting
on Saturday September 27, 2014 @01:51PM (#8377676)
Considering you can get much of this functionality from programs created by CAs (for example, https://www.digicert.com/cert-inspector.htm from my CA), this seems... way too expensive.