[Cryptography] New SSL/TLS certs to each live no longer than 47 days by 2029

[Ron Garret]

> On Apr 22, 2025, at 1:35 AM, iang <iang at iang.org> wrote:
> 
>>> I'm not saying it does or doesn't - I'm saying we don't know.
>>> 
>> That's kind of like saying that until you actually try jumping off the Eiffel Tower you can't know for certain whether or not you will plummet to your death, and so until someone actually does this experiment the guard rails are useless.
> 
> Well, no, it's not like that at all. We have heaps of evidence of people jumping and dying, it's a known phenomena and happens all the time.

You need to read this:

https://usercontent.one/wp/johnworrall.org/wp-content/uploads/2023/08/1989a.pdf?media=1695057174

The Eiffel Tower was not an arbitrary choice.

(BTW, David Deutsch has a very effective rebuttal in chapter 7 of his book "The Fabric of Reality" which I also recommend.)

We have a lot of evidence for hackers picking all available low-lying fruit, and we have a theory that explains this: if there is a way to make money with low effort and low risk, someone will do it.  But for some reason you refuse to accept this, insisting that until we actually remove the guard rails from the top of the tower we can't be sure that anyone will be so foolish as to try jumping off.  There's a very good reason this experiment has never been done.

rg