#cabrowserforum — Public Fediverse posts

Die maximale Laufzeit von digitalen Zertifikaten für verschlüsselte Verbindungen zu Web- und anderen Servern wird sich künftig drastisch verkürzen. Im Jahre 2029 sind diese statt mit 398 Tagen nur noch mit 47 Tagen Laufzeit ausgestattet.

Zum Artikel: https://heise.de/-10352867?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#tls #serverzertifikate #cabrowserforum #verschlüsselung #letsencrypt

Got a FUD mail from someone at cscglobal.com wanting my perspective on the proposed 90 days lifetime on certs, and stating that it would lead to 4 times as much work and increased cost.

(https://www.chromium.org/Home/chromium-security/root-ca-policy/moving-forward-together/).

Here's my reply:
"My perspective can be summarized as "I totally agree with Google". That doesn't happen often.
It'll force IT and OT to become better at inventorying, standardizing, and automating which will increase security overall and lead to significant cost savings going forward.
So what's not to like?"

#Certificates #CertificateLifetime #Automation #Standardization #AssetInventory #CABrowserForum #ACME #RFC8555 #CSCGlobal