Re: 6-day TLS certificates from Let's Encrypt

D <noreply@mixmin.net> wrote:

On Wed, 11 Dec 2024 20:27:37 -0300, Salvador Mirzo <smirzo@example.com> wrote:

Let's Encrypt is planning a 6-day TLS certificate for next year.

Our longstanding offering won't fundamentally change next year, but we
are going to introduce a new offering that's a big shift from anything
we've done before - short-lived certificates. Specifically,
certificates with a lifetime of six days. This is a big upgrade for
the security of the TLS ecosystem because it minimizes exposure time
during a key compromise event.

Source:
https://letsencrypt.org/2024/12/11/eoy-letter-2024/

 
seems like everyone is using tls . . . is there anyone "not" using it?

Given Chrome's "insecure" branding in the URL bar from the "make
everything https" push some years back, there are far fewer who are not
using it.

But six day expiry dates, that just sounds insane.