←back to thread

Certification Authority/Browser Forum adopts new security standards

(security.googleblog.com)
62 points terminalbraid | 2 comments | 31 Mar 25 09:56 UTC | HN request time: 0s | source
Show context
Y-bar ◴[02 Apr 25 17:33 UTC] No.43559138[source]▶
How will this impact self-signed local certificates? Can we still use a five-year lifespan on those or do we need to reduce it to <398 days?
replies(3): >>43559253 #>>43559268 #>>43560211 #
1. bawolff ◴[02 Apr 25 19:00 UTC] No.43560211[source]▶
The article doesn't even mention cert lifetimes.

But the answer is no, self-signed certs dont have to folllw c/ab.

replies(1): >>43561352 #
2. Y-bar ◴[02 Apr 25 20:47 UTC] No.43561352[source]▶
The links in the article mentions the hard limit on certificate lifetime.