SSL certificate validity reduction – CABF vote almost certain to pass

2 points

a year ago

Server certs, still sadly known as 'SSL certificates' are certain to see lifetime reduction.

The CABF ballot SC-081 which proposes to reduce certificate lifetimes went to vote a week ago and closes later today. So far there have been zero 'No' votes and almost all 'Yes' votes - making it sure to pass.

https://groups.google.com/u/1/a/groups.cabforum.org/g/servercert-wg/c/bvWh5RN6tYI

Certs down to 200 days from March 2026. 100 days from march 2027. 47 days from March 2029.

Note with each step-down, the 'DCV reuse period' (the time you can do a validation challenge for a domain and continue to rely on it) goes down accordingly. By the 47-day step-down, DCV reuse is at 10 days.

Very much time to start automating certificates and DNS-challenges if you don't already.