Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
mastodon.green is one of the many independent Mastodon servers you can use to participate in the fediverse.
Plant trees while you use Mastodon. A server originally for people in the EU, but now open for anyone in the world

Administered by:

Server stats:

1.2K
active users

mastodon.green: AboutProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.7

#ssl

1 post1 participant0 posts today
Public *
Valère

digicert.com/blog/tls-certific

The CA/Browser Forum has officially voted to amend the TLS Baseline Requirements to set a schedule for shortening both the lifetime of TLS certificates.

The maximum certificate lifetime is going down:

- As of March 15, 2026, the maximum lifetime for a TLS certificate will be 200 days.
- As of March 15, 2027, the maximum lifetime for a TLS certificate will be 100 days.
- As of March 15, 2029, the maximum lifetime for a TLS certificate will be 47 days.

www.digicert.comTLS Certificate Lifetimes Will Officially Reduce to 47 DaysThe CA/Browser Forum has officially voted to amend the TLS Baseline Requirements to set a schedule for shortening both the lifetime of TLS certificates.
#TLS#SSL
Public
Quixoticgeek

Does anyone know how this new SSL cert expiry date thing is going to affect things like user authentication with SSL certs, i.e. for openvpn.

If we're running our own CA, can I get safari, chrome et al to accept longer cert expiry?

#Linux#SSL#OpenVPN
Public
Verfassungklage@troet.cafe

Nur noch 47 Tage:

#Gültigkeit von #TLS - #Zertifikaten wird drastisch verkürzt

Ab 2029 dürfen #TLS-Zertifikate statt 398 nur noch höchstens 47 Tage lang gültig sein. Der von #Apple eingereichte Vorschlag hat breite Zustimmung erhalten.

Das #CA / #Browser #Forum hat beschlossen, die maximale Gültigkeitsdauer digitaler Zertifikate für den verschlüsselten Datenaustausch via #SSL / #TLS von aktuell 398 auf deutlich geringere 47 Tage zu reduzieren.

golem.de/news/nur-noch-47-tage

Golem.de · Nur noch 47 Tage: Gültigkeit von TLS-Zertifikaten wird drastisch verkürzt - Golem.deBy Marc Stöckel
Continued thread
Public *
Cassander

Specific schedule:

March 15, 2026 - Cert validity (and Domain Control Validation) limited to 200 days.
March 15, 2027 - Cert validity (and Domain Control Validation) limited to 100 days.
March 15, 2029 - Cert validity limited to 47 days and Domain Control Validation limited to 10 days.

There's gonna be a lot of complaints about this in change control meetings over the next year200 days.

#Certificate#Certificate_Management#CABForum
Public *
John Wilson

Hello #fediverse, I am looking for some #cybersecurity help about #safari on #iOS

[Edit: got an answer! Safari removed the lock icon in iOS 18.4 in favor of a full screen warning for non SSL connections. Paraphrased original question below]

I told my mom to always look for the #SSL lock in the URL bar before typing anything into a website (and check URLs for validity and so on).

Now, she never gets the SSL lock in Safari for any website. Ever. I tried to google why and am stumped. Any ideas?

Public *
Marcos Dione

They mean this people and service: buypass.com/products/tls-ssl-c

mrrp.chimmie.k.vu/notes/a5wxn6

Does @letsencrypt have any canary page? I would like to keep supporting them because they are the trailblazers of this, but the fear of those in power in the US is real.

Buypass.com · Buypass Go SSL - Free, easy, based on the ACME standardWhat is ACME? ACME (Automated Certificate Management Environment) is an extensible framework for automating the issuance and domain validation procedures, thereby allowing servers and infrastructural software to obtain certificates without user interaction. ACME is used to obtain Domain Validated (DV) certificates where the CA verifies that the requester has effective control of the Web server and/or DNS server for the domain. This is as opposed to Organisation Validated (OV) and Extended Validation (EV) certificates, where the process is intended to also verify the real-world identity of the requester. ACME defines a protocol that a certificate authority (CA) and an applicant (using an ACME Client) can use to automate the process of verification and certificate issuance. The protocol also provides facilities for other certificate management functions, such as certificate revocation. The two main entities in ACME are the ACME client and the ACME server. The client uses the protocol to request certificate management actions, such as issuance or revocation. A client may run on any server that requires trusted SSL certificates. The server runs at a certificate authority, and responds to client requests, performing the requested actions if the client is authorised. The communication between the client and the server are based on JSON messages over HTTPS. An ACME client is represented by an account key pair. It uses the private key of this key pair to sign all messages sent to the server. The server uses the public key to verify the authenticity and integrity of messages from the client. Many ACME-client implementations are available, however the preferred client is the EFF’s Certbot client. Get Started ACME defines a protocol that a certificate authority (CA) and an applicant (using an ACME Client) can use to automate the process of verification and certificate issuance. To start using the ACME protocol you need an ACME Client and we recommend you to use the EFF’s Certbot Client. You may also use other ACME Client software available, or you may develop your own client implementing the ACME protocol towards Buypass ACME API endpoints according to the ACME specifications. Certbot. We recommend to use Certbot because it’s easy and work on most OS or servers. Download Certbot here. You will need to configure Certbot to use Buypass ACME API. Buypass Go SSL Buypass Go SSL is the name of the SSL certificate you will obtain from Buypass CA using the Buypass ACME API. This is a Domain Validated (DV) certificate. Advantages free certificate automatic issuance and renewal of certificates - no user action required certificate lifetime is 180 days certificate from a Norwegian publicly trusted CA trusted by all major browser vendors Technical information If you need more technical specification and information please take a look at Buypass Community.
#SSL
Public *
Justin D Kruger (he/him)

#HELP

I just received a concerning email from the OTF (@opentechfund.bsky.social) stating that a major source of their funding is in jeopardy.

If you care about open-source, anti-censorship, or the open internet, please consider supporting one of the projects they fund.

#FOSS #OpenSource #TechNews
#USPol #Politics #News #PoliticalNews
#NetNeutrality #EFF
#Wikimedia #Signal #SignalApp
#TOR #TAILs #OpenVPN #VPN #LetsEncrypt #HTTPS #SSL
#Censorship #AntiCensorship

opentech.fund/projects-we-supp

ExploreLive feeds
About