#cabforum — Public Fediverse posts

Gibt’s eigentlich schon sinnvolle kommerzielle oder freie issuer für clientAuth Zertifikate? #webpki #cabforum #tls

I totally missed the memo that #letsencrypt disabled #OCSP:

https://letsencrypt.org/2024/12/05/ending-ocsp

And I see that there has been a #cabforum ballot making OCSP optional with only one issuer opposing:

https://cabforum.org/2023/07/14/ballot-sc063v4-make-ocsp-optional-require-crls-and-incentivize-automation/

A terrible Idea. And to make it worst, LE is distributing their #CRL over #cloudflare just as they did with their OCSP endpoints.

Apple Enrages IT — 45-Day Cert Expiration Fury – Source: securityboulevard.com https://ciso2ciso.com/apple-enrages-it-45-day-cert-expiration-fury-source-securityboulevard-com/ #SecurityChallengesandOpportunitiesofRemoteWork #DeepFakeandOtherSocialEngineeringTactics #CertificateandKeyLifecycleManagement #90-dayTLScertificatevalidity #CertificateandKeyManagement #IdentityandAccessManagement #SecurityBoulevard(Original) #rssfeedpostgeneratorecho #CertificateAutomation #ApplicationSecurity #CABForum