🔐 Let's Encrypt to Cut Certificate Lifetimes to 45 Days by 2028 // Linuxiac

｢ Shorter certificate lifetimes are intended to limit the impact of compromised keys and improve the effectiveness of revocation mechanisms. Alongside this shift, the authorization reuse period, the window during which previously validated domain control can be reused, will decrease from 30 days to just 7 hours ｣

https://linuxiac.com/lets-encrypt-to-cut-certificate-lifetimes-to-45-days-by-2028/

#letsencrypt #certificates #ssl #cybersecurity

DNS over TLS with LetsEncrypt

https://blog.hardill.me.uk/2025/12/06/dns-over-tls-with-letsencrypt/

6 months ago LetsEncrypt announced that they would start issuing certificates for IP addresses. Last week I was curious if they had actually enabled it yet for general consumption, it turned out to be not yet available for everybody, but there was a forum thread you could ask to be added to the testing list (I’ve not linked to it as they have said no more testing, it will go live RSN).

When it […]

#certificates #DNS #DoT #letsencrypt

🔐 Let's Encrypt to Cut Certificate Lifetimes to 45 Days by 2028 // Linuxiac

｢ Shorter certificate lifetimes are intended to limit the impact of compromised keys and improve the effectiveness of revocation mechanisms. Alongside this shift, the authorization reuse period, the window during which previously validated domain control can be reused, will decrease from 30 days to just 7 hours ｣

https://linuxiac.com/lets-encrypt-to-cut-certificate-lifetimes-to-45-days-by-2028/

#letsencrypt #certificates #ssl #cybersecurity

DNS over TLS with LetsEncrypt

https://blog.hardill.me.uk/2025/12/06/dns-over-tls-with-letsencrypt/

6 months ago LetsEncrypt announced that they would start issuing certificates for IP addresses. Last week I was curious if they had actually enabled it yet for general consumption, it turned out to be not yet available for everybody, but there was a forum thread you could ask to be added to the testing list (I’ve not linked to it as they have said no more testing, it will go live RSN).

When it […]

#certificates #DNS #DoT #letsencrypt

Creating S/MIME certificates with Small Step CA

https://blog.hardill.me.uk/2025/08/03/creating-s-mime-certificates-with-small-step-ca/

I’ve been using Small Step CA to issue certificates for services on my LAN for a while. It works really well supporting ACME so services can request/renew certificates automatically.

When Jan Wildeboer ( @jwildeboer) mentioned (when CA’s announced they would drop the clientAuth from server certificates) he was looking to have a play with running a Certificate Authority I […]

#certificates #email

Creating S/MIME certificates with Small Step CA

https://blog.hardill.me.uk/2025/08/03/creating-s-mime-certificates-with-small-step-ca/

I’ve been using Small Step CA to issue certificates for services on my LAN for a while. It works really well supporting ACME so services can request/renew certificates automatically.

When Jan Wildeboer ( @jwildeboer) mentioned (when CA’s announced they would drop the clientAuth from server certificates) he was looking to have a play with running a Certificate Authority I […]

#certificates #email