| ▲ | eqvinox 11 hours ago | |||||||||||||||||||||||||||||||
Short-lived = 6 days. Even if you reissue after 2 or 3 days, that's… not a lot of breathing room. | ||||||||||||||||||||||||||||||||
| ▲ | striking 11 hours ago | parent | next [-] | |||||||||||||||||||||||||||||||
You have to opt in, and they are honest about the tradeoffs when discussing them: > Short-lived certificates are opt-in and we have no plan to make them the default at this time. Subscribers that have fully automated their renewal process should be able to switch to short-lived certificates easily if they wish, but we understand that not everyone is in that position and generally comfortable with this significantly shorter lifetime. We hope that over time everyone moves to automated solutions and we can demonstrate that short-lived certificates work well. https://letsencrypt.org/2026/01/15/6day-and-ip-general-avail... | ||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||
| ▲ | bakies 11 hours ago | parent | prev [-] | |||||||||||||||||||||||||||||||
3-4 days is a ton of breathing room | ||||||||||||||||||||||||||||||||