Let's Encrypt Announces Certificate Infrastructure Updates Including New Root Certificates and Shorter Lifetimes
By
schmuckonwheels
Crackles when you bite it. Shows the baker did the work.
Summary
Let's Encrypt is implementing several important changes to their SSL/TLS certificate infrastructure, including the introduction of new root certificates, deprecation of TLS client authentication, and shortening certificate lifetimes. These updates are part of ongoing security improvements and infrastructure modernization efforts for the widely-used free certificate authority service.
Key quotes
· 3 pulledLet's Encrypt is introducing several updates to the certificates we issue
including new root certificates, the deprecation of TLS client authentication, and shortening certificate lifetimes
To help roll out changes gradually and minimize disruption
You might also wanna read
Suspicious hidden message discovered in jqwik testing library 1.10.0
A developer reports discovering a suspicious string in the jqwik testing library (version 1.10.0) that appears during Maven test runs. The s
github.com·4h ago
Anthropic Releases Free Security Plugin for Claude Code Terminal to Detect Vulnerabilities
Anthropic has released a free security-guidance plugin for its Claude Code terminal tool that autonomously reviews code edits, model outputs
cybersecuritynews.com·11h ago
wolfCOSE: A Lightweight COSE + CBOR Library for Embedded Systems with PQC and FIPS 140-3 Support
wolfCOSE is a lightweight C library implementing CBOR (RFC 8949) and COSE (RFC 9052/9053) for embedded systems, using wolfSSL as the crypto
github.com·1d ago
Anthropic launches Claude Security beta for codebase vulnerability scanning
Anthropic has released Claude Security, a defensive security tool within Claude Code on the web, from closed preview to beta for Claude Ente
thenewstack.io·1d ago
How LinkedIn's 2012 Breach Exposed the Dangers of Unsalted Password Hashes
This article examines the 2012 LinkedIn breach where attackers cracked millions of passwords using fast, unsalted hashes like MD5 and SHA-1.
hendryadrian.com·2d ago
AI-Generated npm Package Leaks Its Own GitHub Token, Exposing Malware Operator
A malicious npm package named mouse5212-super-formatter, identified by OX Security, was caught leaking its own hardcoded GitHub token. This
infosecurity-magazine.com·2d ago