Groups | Search | Server Info | Keyboard shortcuts | Login | Register


Groups > comp.misc > #26286

Re: 6-day TLS certificates from Let's Encrypt

Newsgroups comp.misc
Date 2024-12-12 00:12 +0000
From D <noreply@mixmin.net>
References <877c85reae.fsf@example.com>
Subject Re: 6-day TLS certificates from Let's Encrypt
Message-ID <20241212.001223.a7feaecb@mixmin.net> (permalink)

Show all headers | View raw


On Wed, 11 Dec 2024 20:27:37 -0300, Salvador Mirzo <smirzo@example.com> wrote:
>Let's Encrypt is planning a 6-day TLS certificate for next year.
>> Our longstanding offering won't fundamentally change next year, but we
>> are going to introduce a new offering that's a big shift from anything
>> we've done before - short-lived certificates. Specifically,
>> certificates with a lifetime of six days. This is a big upgrade for
>> the security of the TLS ecosystem because it minimizes exposure time
>> during a key compromise event.
>Source: 
>https://letsencrypt.org/2024/12/11/eoy-letter-2024/

seems like everyone is using tls . . . is there anyone "not" using it?

(using Tor Browser 14.0.3)
https://letsencrypt.org/
>Thousands of people around the world make our work possible. Donate today.
>...
>About Us
>https://letsencrypt.org/about/
>About Let's Encrypt
>Let's Encrypt is a free, automated, and open certificate authority (CA), run for
>the public's benefit. It is a service provided by the Internet Security Research
>Group (ISRG).
>We give people the digital certificates they need in order to enable HTTPS
>(SSL/TLS) for websites, for free, in the most user-friendly way we can. We do this
>because we want to create a more secure and privacy-respecting Web.
>You can read about our most recent year in review by downloading our annual report.
>The key principles behind Let's Encrypt are:
>  Free: Anyone who owns a domain name can use Let's Encrypt to obtain a trusted
>  certificate at zero cost.
>  Automatic: Software running on a web server can interact with Let's Encrypt to
>  painlessly obtain a certificate, securely configure it for use, and automatically
>  take care of renewal.
>  Secure: Let's Encrypt will serve as a platform for advancing TLS security best
>  practices, both on the CA side and by helping site operators properly secure
>  their servers.
>  Transparent: All certificates issued or revoked will be publicly recorded and
>  available for anyone to inspect.
>  Open: The automatic issuance and renewal protocol is published as an open
>  standard that others can adopt.
>  Cooperative: Much like the underlying Internet protocols themselves, Let's
>  Encrypt is a joint effort to benefit the community, beyond the control of any one
>  organization.
>We have a page with more detailed information about how the Let's Encrypt CA works.
>Support a more secure and privacy-respecting Web.
>Donate
>Let's Encrypt is a free, automated, and open certificate authority brought to you
>by the nonprofit Internet Security Research Group (ISRG). Read all about our
>nonprofit work this year in our 2024 Annual Report.
>548 Market St, PMB 77519, San Francisco, CA 94104-5401, USA
>Send all mail or inquiries to:
>PO Box 18666, Minneapolis, MN 55418-0666, USA
>  GitHub
>  LinkedIn
>  Mastodon
>View our privacy policy.
>View our trademark policy.
>Subscribe for email updates about Let's Encrypt and other ISRG projects
>(c) 2024 Internet Security Research Group
[end quoted plain text]

(using Tor Browser 14.0.3)
https://duckduckgo.com/?q=transport+layer+security+secure+sockets

Back to comp.misc | Previous | NextPrevious in thread | Next in thread | Find similar


Thread

6-day TLS certificates from Let's Encrypt Salvador Mirzo <smirzo@example.com> - 2024-12-11 20:27 -0300
  Re: 6-day TLS certificates from Let's Encrypt D <noreply@mixmin.net> - 2024-12-12 00:12 +0000
    Re: 6-day TLS certificates from Let's Encrypt Rich <rich@example.invalid> - 2024-12-12 00:28 +0000
      Re: 6-day TLS certificates from Let's Encrypt Broseki <broseki@whitetail.is> - 2024-12-12 01:05 +0000
        Re: 6-day TLS certificates from Let's Encrypt Lawrence D'Oliveiro <ldo@nz.invalid> - 2024-12-12 06:07 +0000
          Re: 6-day TLS certificates from Let's Encrypt Broseki <broseki@whitetail.is> - 2024-12-12 22:28 +0000
            Re: 6-day TLS certificates from Let's Encrypt Richard Kettlewell <invalid@invalid.invalid> - 2024-12-12 23:28 +0000
            Re: 6-day TLS certificates from Let's Encrypt Lawrence D'Oliveiro <ldo@nz.invalid> - 2024-12-13 03:02 +0000
      Re: 6-day TLS certificates from Let's Encrypt D <noreply@mixmin.net> - 2024-12-12 01:42 +0000
      Re: 6-day TLS certificates from Let's Encrypt Richard Kettlewell <invalid@invalid.invalid> - 2024-12-12 10:03 +0000
      Re: 6-day TLS certificates from Let's Encrypt Theo <theom+news@chiark.greenend.org.uk> - 2024-12-13 18:22 +0000
        Re: 6-day TLS certificates from Let's Encrypt Lawrence D'Oliveiro <ldo@nz.invalid> - 2024-12-13 22:01 +0000
        Re: 6-day TLS certificates from Let's Encrypt Eli the Bearded <*@eli.users.panix.com> - 2024-12-15 03:11 +0000
    Re: 6-day TLS certificates from Let's Encrypt Lawrence D'Oliveiro <ldo@nz.invalid> - 2024-12-12 01:10 +0000

csiph-web