The CA/Browser Forum has officially voted to amend the TLS Baseline Requirements to set a schedule for shortening both the lifetime of TLS certificates.
Certs are free through Let’s Encrypt (and have been for quite some time now, like a decade). Certs makes people peeking at what you’re doing along the route substantially more difficult.
Can we stop doing certs now?
Can we stop letting google decide what is and isn’t acceptable on the internet based on who gave them money?
So how do we do trust if we don’t have specific people to trust to issue trust
Just go to the website.
What… Website???
The one you want to go to
How do I know it’s the website I want to go to and not a fake website
I don’t care?
There’s a whole internet out there that is disallowed from being accessed.
Google shouldn’t control that.
Alright you have no idea what’s going on
Damn, if only there was some way to certify that.
Miserable bait
Certs are free through Let’s Encrypt (and have been for quite some time now, like a decade). Certs makes people peeking at what you’re doing along the route substantially more difficult.