I’m not entirely sure, but I think I’m sensing that Steve Gibson isn’t supportive of the #LetsEncrypt idea to move to 6-day #TLS certificates.

[jdw@the.mayhem.academy]

I’m not entirely sure, but I think I’m sensing that Steve Gibson isn’t supportive of the #LetsEncrypt idea to move to 6-day #TLS certificates.

[octade@soc.octade.net]

6-day TLS expiration? Am I assuming rightly? If so, that's nuts. It is already occasionally problematic renewing in time with the longer period.

Is someone trying to sow up the market so they can put a meter on it?

[steve@ferral.cat]

@octade @jdw Google moving to 90 days was a bad idea. Moving to 6 days is insane. This is going to lead to users ultimately accepting questionable certs (which becomes a major security issue) or users not being able to access services.

[octade@soc.octade.net]

@[email protected]

Or possibly ... only operators with huge computational infrastructure will be able to service the demand, cutting out all the smaller fish?

There is likely some kind of angle or grift or rent-seeking when corpos suggest or do crazy stuff.