[Cryptography] New SSL/TLS certs to each live no longer than 47 days by 2029

[iang]

On 21/04/2025 15:41, Salz, Rich via cryptography wrote:

> - Also, an additional thing to note, LE only exists because the CAbal lets it exist. They could change this decision at their whim with any excuse or probably none at all.
>
> No, they can’t. Not without actually opening themselves up to all sorts of legal charges of actually being a cabal, among others.

They're smart. If they sense that they might be challanged by legal issues, they'll find some other way to achieve their objectives. Such as forcing some other minor player to bend, and then hitting LE after the previous play acting has been done.

The foundation of the Cabal is that the browsers volunteer to accept the CAbal's recommendations. Which is enough of a defence to befuddle any court. Also note that the total revenues of the business isn't that high. And those prosecutors in anti-trust regulation are only a phone call away from vested interests who want this system to continue...

In short, their pretty safe.

iang
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.metzdowd.com/pipermail/cryptography/attachments/20250421/4275180a/attachment.htm>