Oh hey, CAA
records really work
Switched one site from paid TLS certificate to LetsEncrypt and forgot to update DNS record. As expected, LetsEncrypt looks at and refuses to issue a certificate if CAA
lists other issuer. Nice
Oh hey, CAA
records really work
Switched one site from paid TLS certificate to LetsEncrypt and forgot to update DNS record. As expected, LetsEncrypt looks at and refuses to issue a certificate if CAA
lists other issuer. Nice
Internet Giants Agree to Reduce TLS Certificate Lifespan to 47 Days by 2029 https://www.securityweek.com/internet-giants-agree-to-reduce-tls-certificate-lifespan-to-47-days-by-2029/ #Identity&Access #certificate #lifespan #TLS
Internet Giants Agree to Reduce TLS Certificate Lifespan to 47 Days by 2029 https://www.securityweek.com/internet-giants-agree-to-reduce-tls-certificate-lifespan-to-47-days-by-2029/ #Identity&Access #certificate #lifespan #TLS
Do any email sysadmin understand what's the difference between StartTLS and x509 scores in the MECSA report?
How to go from orange to green score? What requirements must the certificate have and is it possible with LetsEncrypt?
relevant links https://mecsa.jrc.ec.europa.eu/faq#section2 and https://mecsa.jrc.ec.europa.eu/en/technical#x509
Specific schedule:
March 15, 2026 - Cert validity (and Domain Control Validation) limited to 200 days.
March 15, 2027 - Cert validity (and Domain Control Validation) limited to 100 days.
March 15, 2029 - Cert validity limited to 47 days and Domain Control Validation limited to 10 days.
There's gonna be a lot of complaints about this in change control meetings over the next year200 days.
Buckle up, kids. Automate your certificate rotations or die trying. WebPKI certificate validity period will be 47 days by 2029. https://www.bleepingcomputer.com/news/security/ssl-tls-certificate-lifespans-reduced-to-47-days-by-2029/
apt-listchanges: News
---------------------
debian-archive-keyring (2025.1) unstable; urgency=medium
#Certificate (#keyring) files in /usr/share/keyrings now have the
file extension .pgp, rather than .gpg. #Compatibility links are
provided and will be removed in #Debian 14 'forky'.
-- Jonathan Wiltshire <jmw@debian.org> Wed, 19 Mar 2025 06:57:24 +0000
縮短 TLS certificate 的最長效期的投票 SC-081
在 Lobsters 上看到縮短 TLS certificate 最長效期的投票消息:「Mandatory short duration TLS certificates are probably coming soon」。 文章裡面有提到 mailing list 上的投票:「Voting Period Begins: SC-081v3: Introduce Schedule of Reducing Validity and Data Reuse Periods」,投票期間已經結束了,所以剛好可以算一下票數。 Certificate Consumers 端: YES (4):Google、Apple、Mozilla、Microsoft Certificate Issuer 端: YES…
Ok, first time marrying someone, and Circle Line says first time someone got married! - engagements, once a month, apparently.
#NYC #CircleLine #fairy #ferry #boat #ordination #certificate #marriage #license #witnesses #now #pronounce #you #married #wow
Two more eQSL awards under the belt last week, with the eJapan Award representing confirmed contacts with 10 different call areas in Japan, and the eDX award representing confirmed contacts with 50 different Countries.
EFF @EFF
Certbot 4.0 is out and now supports short-lived certificates! Offering shorter renewal periods.
https://www.eff.org/deeplinks/2025/04/certbot-40-long-live-short-lived-certs
ISO Certification in Melbourne | Quality Control Certification
Are you ready for ISO Certification in Melbourne? Quality Control Certification provides professional guidance every step of the way.
Visit: https://qccertification.com/BlogDetails/ISO-Certification-in-Melbourne-9001,14001,45001,22000,27001
#australia
#newcastle
#business
#ISO
#sydney
#northeastengland
#manchester
#certificate
#certified
ISO Certification in Jeddah | Quality Control Certification
If you're aiming for ISO Certification in Jeddah, we’re here to guide you. At Quality Control Certification, our team simplifies the process with the promise.
Visit: https://qccertification.com/BlogDetails/ISO-Certification-in-Jeddah-9001,14001,45001,22000,27001
#business
#ISO
#saudi
#saudiarabia
#dubai
#bahrain
#kuwait
#riyadh
#jeddah
#islam
#abudhabi
#certificate
#certified
ISO Certification in Riyadh | Quality Control Certification
Looking for ISO Certification in Riyadh? Quality Control Certification – "Trusted Standards.
Visit: https://qccertification.com/BlogDetails/ISO-Certification-in-Riyadh-9001,14001,45001,22000,27001
#business
#ISO
#saudi
#saudiarabia
#dubai
#bahrain
#kuwait
#riyadh
#jeddah
#islam
#abudhabi
#certificate
#certified
ISO Certification in Edinburgh | Quality Control Certification
Are you in need of ISO Certification in Edinburgh? Quality Control Certification – “Excellence Recognized Globally” works with businesses to build strong, compliant systems that reflect international best practices.
Visit: https://qccertification.com/BlogDetails/ISO-Certification-in-Edinburgh-9001,14001,45001,22000,27001
#business
#ISO
#uk
#london
#football
#unitedkingdom
#usa
#travel
#canada
#certificate
#certified
I just launched https://ChangeYourStarSign.com, a website that helps people change their #starSigns to any that they like (and provides a #certificate to print and share).
Let's Encrypt 把 CRL 位置加到憑證裡面了
在「Adding CRL URLs to certificates」這邊看到的公告,把 CRL 位置加到憑證裡面了: On March 12, 2025, Let’s Encrypt will start including CRL (Certificate Revocation List) URLs in certificates we issue, in addition to the OCSP URLs we already include. This is part of our previously announced changes to deprecate support for OCSP. CRLs and OCSP are two di…
New certificates .... Just picked up the new certificates for the Mythology Series. very happy with the results. #art #certificate #print_work
Medusa Ransomware Disables Anti-Malware Tools with Stolen Certificates https://hackread.com/medusa-ransomware-anti-malware-tools-stolen-certificates/ #Cybersecurity #CyberAttacks #Certificate #CyberAttack #Ransomware #Security #security #Medusa #China