4 ms·
You have to opt in, and they are honest about the tradeoffs when discussing them: > Short-lived certificates are opt-in and we have no plan to make them the de
by striking 5mo ago
You have to opt in, and they are honest about the tradeoffs when discussing them:
> Short-lived certificates are opt-in and we have no plan to make them the default at this time. Subscribers that have fully automated their renewal process should be able to switch to short-lived certificates easily if they wish, but we understand that not everyone is in that position and generally comfortable with this significantly shorter lifetime. We hope that over time everyone moves to automated solutions and we can demonstrate that short-lived certificates work well.
https://letsencrypt.org/2026/01/15/6day-and-ip-general-availability https://letsencrypt.org/2026/01/15/6day-and-ip-general-avail...
- eqvinox 5mo agoThat's not really an answer, especially with: > We hope that over time everyone moves to automated solutions and we can demonstrate that short-lived certificates work well. They're expressly trying to show that this is a viable approach. It's actually kinda good that this outage, whatever it is, is happening now, as it's giving them a chance to demonstrate (or not) that they can deliver.
- nottorp 5mo ago> no plan to make them the default at this time At this time! Boil the frog slowly...
- Dylan16807 5mo agoIs the frog the guy that still won't automate their certificates?
- nottorp 5mo agoMine are automated. Somehow it reminds me of prayer wheels though...
- Dylan16807 5mo agoForcing certificates to expire in less than a year means people don't forget how to update them, which is a big benefit. And once people automate, short-lived certificates are a workable plan B for how to revoke certificates and have the revocation actually work. These are both reasonable goals.
- nottorp 5mo ago> people don't forget how to update them Seriously? I don't even remember how the letsencrypt auto renew service is called. No idea how I did the initial setup either.
- Dylan16807 5mo agoYes, seriously. Forgetting how to set up the automation is a different and significantly smaller issue.