3 ms·
Just FYI, the issue is with certificates in general, nothing to do with LE specifically. Dumbed down, the problem is that someone the old device never heard of
by Semaphor 6y ago
Just FYI, the issue is with certificates in general, nothing to do with LE specifically.
Dumbed down, the problem is that someone the old device never heard of, is not trustworthy.
Of course, an OS should still work after 8 years. But the problem is, that the OS has been abandoned (by the device manufacturer and possibly the community), so it is falling apart. Anything that accesses the internet needs regular maintenance to not become a security hazard.
- forty 6y agoI think it's a bit LE specific here though, since according to the article, real trust anchors do not expire on android, so it's only because LE is relatively new and was not a bundled CA root at the time, and had to be signed by a CA that was bundled (and this intermediate signature is what expires if I understand correctly)
- Semaphor 6y agoIt’s not, as any new CA would have the same problem.