Let's Encrypt is adding two additional remote perspectives for domain validation
Summary
Let's Encrypt is adding two additional remote perspectives to its domain validation process, improving redundancy and resilience in how it verifies domain control for TLS certificate issuance.
Similar Articles
A Post-Quantum Future for Let's Encrypt
Let's Encrypt announces plans to adopt Merkle Tree Certificates for post-quantum authentication, addressing the growing urgency to migrate to post-quantum signatures in the Web PKI.
@staylightblow8: Let's Encrypt issues about 10 million free TLS certificates every day, serving over 500 million websites, and Cloudflar…
Cloudflare is preparing to become a Certificate Authority itself after acquiring a GlobalSign root certificate, motivated by the systemic risk of relying on Let's Encrypt's concentration in the free TLS certificate market. The move raises questions about whether it will decentralize Web PKI or create an even larger central point.
ACME CAA Extensions to Become Mandatory
The CA/Browser Forum has voted to make ACME CAA extensions mandatory by March 2027, a key step toward strong cryptographic domain validation using DNSSEC.
TLS certificates for internal services done right
Explains how to set up TLS certificates for internal services using split-horizon DNS, a VPN with DNS resolver, and ACME clients like acme.sh with Let's Encrypt, providing a practical alternative to self-signed certificates.
Let's Encrypt cuts certificate lifetimes to 64 days starting February 2027
Let's Encrypt将于2027年2月10日起把免费SSL/TLS证书有效期从90天缩短至64天，并计划在2028年进一步缩短至45天，以推动ACME自动化续期的普及。