From Newsgroup: comp.misc

TLS/SSL certs from the free Let’s Encrypt service are currently valid
for 90 days. But the validity is being reduced to 64 days from
February, with the aim of reducing the vulnerability window if a
certificate key should get compromised. And yes, even further
reductions are planned in the future.

<https://arstechnica.com/gadgets/2026/10/lets-encrypt-cuts-certificate-lifetimes-to-64-days-starting-february-2027/>

On a standard CertBot install on a Debian system, the certificate
renewals are checked twice a day, so this change probably won’t make a noticeable difference to anything. But if you’ve bodged together your
own scripts to manage the renewal process, you may need to recheck
your work.
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: comp.misc

On Thu, 8 Oct 2026 20:47:49 -0000 (UTC), Lawrence D�Oliveiro wrote:

TLS/SSL certs from the free Let�s Encrypt service are currently valid
for 90 days. But the validity is being reduced to 64 days from
February, with the aim of reducing the vulnerability window if a
certificate key should get compromised. And yes, even further
reductions are planned in the future.

Uh... can SHA-2 be brute forced within 64 days or less with current fastest computers?
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: comp.misc

JJ <[email protected]> writes:

Lawrence D’Oliveiro wrote:

TLS/SSL certs from the free Let’s Encrypt service are currently valid
for 90 days. But the validity is being reduced to 64 days from
February, with the aim of reducing the vulnerability window if a

^^^^

certificate key should get compromised. And yes, even further

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

reductions are planned in the future.

Uh... can SHA-2 be brute forced within 64 days or less with current
fastest computers?

That’s not the risk being mitigated here.

(And no, it can’t. The largest public real-life hash searcher generates
about 2^92 SHA256 hashes in 64 days, nowhere near enough for collision
search and comedically inadequate for preimage search.)
--
https://www.greenend.org.uk/rjk/
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: comp.misc

On Fri, 9 Oct 2026 13:56:13 +0700, JJ wrote:

Uh... can SHA-2 be brute forced within 64 days or less with current
fastest computers?

No.
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: comp.misc

On Fri, 09 Oct 2026 09:36:41 +0100, Richard Kettlewell wrote:

JJ <[email protected]> writes:

Lawrence D�Oliveiro wrote:

TLS/SSL certs from the free Let�s Encrypt service are currently valid
for 90 days. But the validity is being reduced to 64 days from
February, with the aim of reducing the vulnerability window if a

^^^^

certificate key should get compromised. And yes, even further

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

reductions are planned in the future.

Uh... can SHA-2 be brute forced within 64 days or less with current
fastest computers?

That�s not the risk being mitigated here.

(And no, it can�t. The largest public real-life hash searcher generates
about 2^92 SHA256 hashes in 64 days, nowhere near enough for collision
search and comedically inadequate for preimage search.)

Hmm... I get a feeling that, a standard to require daily site certificate update would be made to strengthen security.
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: comp.misc

On Sat, 10 Oct 2026 12:34:39 +0700, JJ wrote:

I get a feeling that, a standard to require daily site certificate
update would be made to strengthen security.

That is the reason, yes. But the big risk is not from any likelihood
of cracking encryption keys.
--- Synchronet 3.22a-Linux NewsLink 1.2