Gutmann cites Fermat checks for RSA keys with close primes
On the eMudhra intermediates thread, he says Let's Encrypt rejects public keys whose primes are too close.
Stories per day · 30 days
3 RSS
12 stories, newest first · one card per story
Stories tagged #lets-encrypt
Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch
Let's Encrypt will issue 64-day certificates by default from February 10, 2027, ahead of planned 45-day validity in 2028.
2
Let’s Encrypt TLS certificate lifetimes to drop from 90 to 64 days starting February 2027
Let’s Encrypt will issue 64-day TLS certificates by default from February 10, 2027, down from 90 days.
1
Let’s Encrypt Cuts TLS Certificate Lifetimes From 90 to 64 Days Starting February 2027
Let's Encrypt will cut default TLS certificate lifetimes from 90 to 64 days on February 10, 2027.
1
Let's Encrypt cuts certificate lifetimes to 64 days starting February 2027
Let's Encrypt will shorten TLS certificate lifetimes from 90 to 64 days starting February 10, 2027.
64-Day Certificate Lifetimes Coming Feb 2027
Let's Encrypt will default to 64-day certificates on February 10, 2027.
2
Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
Attackers hijacked the .gh, .sl, and .as registries and obtained later-revoked HTTPS certificates for Google and YouTube domains.
3
Self-hosted HTTP tunnels with SSH and Nginx
A write-up shows self-hosted HTTP tunnels using OpenSSH reverse forwards and nginx signed URLs.
Cloudflare Launches Free Certificate Authority for the Whole Internet
Cloudflare is seeking approval to run a free public CA with ACME and post-quantum certificates.
2
Risky Bulletin: Sanctions force CAs to revoke TLS certs in Iran, Russia
US Treasury sanctions since May have forced certificate authorities to revoke TLS certificates for Russian and Iranian government, bank, and media sites.
3
Building a certificate authority for the whole Internet
Cloudflare will become a public certificate authority, acquiring GlobalSign's trusted root and applying to Chrome, Apple, Microsoft, and Mozilla root programs, with post-quantum certificates planned.
4
Security Incident – BGP Hijacking
Attackers BGP-hijacked Softaculous' Hetzner IP block for 33 hours, obtained valid TLS certificates, and delivered a malicious Virtualizor update to some servers.
5