On Mon, 7 Apr 2025, Klaus Ethgen wrote:
With this Lets-Encrypt-stuff comes that the certificate needs to be replaced every 3 Months. I do not have all the time to replace them that often.
FYI, it seems likely that all certificate issuers will change to short intervals as well, gradually down to 47 days by 2028, suggesting that by that time automation will be all but required. Mainly it is for browsers but that would force some senders to go along if their receivers began rejecting expired certificates or those that exceed the limit (e.g., self-signed for 10 years), which seems almost certain due to the underlying tooling being primarily browser focused.
/mark _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop