[Moderator’s note: If you would like to express your support for longer certificate lifetimes, please ‘like’ (:heart:) this thread rather than posting a +1 comment, per Community Guidlines ]. Let’s Encrypt certificates currently have a ninety-day lifetime . Web standards do not require any minimum ce…

IMO short lifetime has a massive upside, in fact, I’d accept certificates that only for a few days, or even less (but let’s assume <1d is silly because of clients without time synchronisation or internet outages). The whole point is that process is automated. In fact, it provides a stronger securi…

So with 166 likes out of 212 replies, and some pretty compelling evidence that restricting the cetificate lifetime to 90 days is not workable for a large segment of users, there any movement on allowing longer lifetimes? I’m fine with leaving the default at 90 days, but at least allow us to set a ye…

[image] ggiesen: So with 166 likes out of 212 replies, ..... My problem with this whole topic and the "like" to agree is there is nowhere to disagree. So there is no way to get a consensus. Personally I wish the timescale was shortened a lot ( although I understand it would need to be do…

[image] ggiesen: Another common complaint is that there has be almost zero feedback from LE itself (other than creating the topic). This topic has been going on in one form or another for almost 8 months now, and we still have little if any feedback from LE, and no progress despite a clear case …

[image] pfg: short certificate lifetimes will force more users to automate certificate deployment, that it will force vendors to make it easier to deploy new certificates (without downtime), and that the security benefits of certificates with shorter lifetimes are more important than the fact th…

[image] pfg: I'd wager they were aware of most of the implications even before this discussion was started, and they still made a conscious decision to enforce short certificate lifetimes. They decided that short certificate lifetimes will force more users to automate certificate deployment, tha…

It may not tempt all IoT vendors to implement automation, however I think with over 1 million certificates issued when starting from scratch only 16 months ago and growing at a current rate of more than 100,000 certificates per week … Let’s Encrypt haven’t got it that wrong and a lot of people are i…

well the cert count also does include replaced certs “test” certs which were made on the main server and dont forget that you can count away a lot of the certs just for renewals coz the certs made in december already expired. so the number is inflated

[image] pfg: I see this a lot here, but I wonder what you'd consider appropriate as feedback on this matter? Let's Encrypt is obviously aware that there are some use-cases where automation can be hard to deploy or where short certificate lifetimes make certain things harder to implement. Some…

Pros and cons of 90-day certificate lifetimes

Issuance Policy

My1 March 21, 2016, 8:57pm 221

why doesnt discourse have a poll feature?

[Poll] Do we need longer cert validity times?

How to make a poll

Topic		Replies	Views
Maximum (and minimum) certificate lifetimes? Issuance Policy	242	85791	November 30, 2015
Should LE allow for shorter and longer cert life times? Issuance Policy	30	4493	December 22, 2018
[Poll] Do we need longer cert validity times? Issuance Policy	49	10103	April 10, 2016
90 day expiration Feature Requests	31	799	February 25, 2025
Getting Bad Vibes	80	22756	November 26, 2016

Pros and cons of 90-day certificate lifetimes

Related topics