Chrome Pushes for Shorter-Life Certificates (opens in new tab)

(chromium.org)

4 pointsnaetius2y ago2 comments

2 comments

In summary, the proposed certificate maximum lifetime:

- Domain Validation: from 398 to 90 days (same as the Let's Encrypt limit [1])

- Root CA: from 30+ to 7 years

- Subordinate CA: 3 years

This makes the web unusable for semi-connected devices. An offline capable mapping app where the app expires so quickly is a nasty lurking time bomb.

j / k navigate · click thread line to collapse

In summary, the proposed certificate maximum lifetime:

- Domain Validation: from 398 to 90 days (same as the Let's Encrypt limit [1])

- Root CA: from 30+ to 7 years

- Subordinate CA: 3 years

This makes the web unusable for semi-connected devices. An offline capable mapping app where the app expires so quickly is a nasty lurking time bomb.

j / k navigate · click thread line to collapse