[Cryptography] New SSL/TLS certs to each live no longer than 47 days by 2029

Peter Fairbrother peter at tsto.co.uk
Tue Apr 15 19:57:30 EDT 2025


"CA/Browser Forum – a central body of web browser makers, security 
certificate issuers, and friends – has voted to cut the maximum lifespan 
of new SSL/TLS certs to just 47 days by March 15, 2029."

El Reg: 
https://www.theregister.com/2025/04/14/ssl_tls_certificates/?td=rt-3a


Seems "they" have given up on certificate revocation. Is this a real 
security measure or just a boondoggle? Is there a better solution?


Peter Fairbrother


More information about the cryptography mailing list