SSL Why we need to do more to reduce certificate lifetimes

eva2000 · 2018-02-24

Scott Helme wrote an interesting article on why SSL certificate lifetime durations are reducing to 825 days max for commercial SSL certificates from March 2018 onwards. Why we need to do more to reduce certificate lifetimes. From March 2018 that means...

Discussion in 'Domains, DNS, Email & SSL Certificates' started by eva2000, Feb 24, 2018.

Tags:

Previous Thread Next Thread

Feb 24, 2018 #1

eva2000 Administrator Staff Member

58,894

12,490

113

May 24, 2014

Brisbane, Australia

Ratings:

+19,122

Local Time:

6:07 PM

Nginx 1.31.x

MariaDB 10.x/11.4+/12.3+

Scott Helme wrote an interesting article on why SSL certificate lifetime durations are reducing to 825 days max for commercial SSL certificates from March 2018 onwards. Why we need to do more to reduce certificate lifetimes.

From March 2018 that means that all newly issued certificates will be limited to a maximum validity period of 825 days! This is a great step forwards for the security of the wider web and my hope is that another ballot will be put forward later this year to try and reduce the maximum validity down to 398 days again. Perhaps the small step to 825 days will be enough to encourage a further reduction, we can only wait and see. With that said, and having given a clear view on where we currently are with certificates, let's take a look at why we need to reduce the validity period on certificates and what benefits doing so would bring.
Click to expand...

Previous Thread Next Thread

(You must log in or sign up to reply here.)

Log in / Register

Forums

Learn about Centmin Mod LEMP Stack today

SSL Why we need to do more to reduce certificate lifetimes

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Learn about Centmin Mod LEMP Stack today

SSL Why we need to do more to reduce certificate lifetimes

eva2000 Administrator Staff Member

.