Waitman Gobble

Tue, 19 Aug 2025 18:51:40 -0400 from Get Ready To Rumbly

I guess my birthday will be signficant for the next few years. Time to automate SSL certificate renewals.
The Great SSL Certificate Panic

The Certificate Authority Browser Forum has officially blessed us with the internet equivalent of mandatory daily dental flossing: SSL certificates that expire every 47 days by 2029. That’s right. The same certificates that currently give you a comfortable 398 days to procrastinate are about to need replacing—to abuse my dental hygiene conceit—more often than your

Bill Statler

Wed, 20 Aug 2025 18:12:22 -0400 from Bunny of Doom

Possibly relevant:

CRLite: Fast, private, and comprehensive certificate revocation checking in Firefox – Mozilla Hacks - the Web developer blog

Firefox is now the first and the only browser to deploy fast and comprehensive certificate revocation checking that does not reveal your browsing activity to anyone (not even to Mozilla). ...

Waitman Gobble

Wed, 20 Aug 2025 19:06:50 -0400 from Get Ready To Rumbly

I don't believe expired certs end up in a CRL, but intentionally revoked certs. I let a domain go and whoever picked it up had their cert end up in a CRL, evil warning from browser. I'm not sure why a person would intentionally do that, I figured they were likely up to no good and got dinged.