Live data from Hacker News

Chrome Pushes for Shorter-Life Certificates

1–3 of 3 posts

Post by naetius » Wed, Mar 29, 2023, 10:08 AM UTC

Re: Chrome Pushes for Shorter-Life Certificates

Post by efortis » Wed, Mar 29, 2023, 11:15 AM UTC

In summary, the proposed certificate maximum lifetime:

- Domain Validation: from 398 to 90 days (same as the Let's Encrypt limit [1])

- Root CA: from 30+ to 7 years

- Subordinate CA: 3 years

Post by rektide » Wed, Mar 29, 2023, 3:39 PM UTC

This makes the web unusable for semi-connected devices. An offline capable mapping app where the app expires so quickly is a nasty lurking time bomb.