←back to thread

Certification Authority/Browser Forum adopts new security standards

(security.googleblog.com)
62 points terminalbraid | 1 comments | 31 Mar 25 09:56 UTC | HN request time: 0.311s | source
Show context
Y-bar ◴[02 Apr 25 17:33 UTC] No.43559138[source]▶
How will this impact self-signed local certificates? Can we still use a five-year lifespan on those or do we need to reduce it to <398 days?
replies(3): >>43559253 #>>43559268 #>>43560211 #
1. electroly ◴[02 Apr 25 17:46 UTC] No.43559268[source]▶
Your local certificates are not bound by the Baseline Requirements at all; they're irrelevant to you. You can do whatever you want if your CA is not in a root program.