A change in Safari will soon prevent website owners from using TLS certificates for longer than 13 months – Gizmo Posts 24

Within a short while, Apples browser Safari will warn users when a website theyre visiting is using a TLS/SSL certificate that is valid for more than 398 days. It doesnt have to be an expired one either. Any certificate that has been valid for more than 398 days since issuing will now be automatically flagged by the browser.

This has come after the 49th CA/Browser Forum in Slovakia, and The Register reported that the goal is plain- ensuring that web developers are using the latest certificates and technology available. Before this came to be, developers were able to assign certificates for multiple years, resulting in using technology that was long out of date.

As reported by an insider, the aim is to improve website security by making sure Deva uses certificates with the latest cryptographic standards and reducing the number of old and outdated certificates that has a high chance of getting stolen and re-used for phishing and drive-by malware attacks. If any miscreant happens to break the cryptography in an SSL/TLS standard, people will be switching over to more secure certificates witn hin a year.

Like any other thing, this is also going to have its set of negative points. According to Tim Callan, who is from the SSL management firm Sectigo, more certificate replacements means more chances of something going wrong.

In a report to The Register, he stated, Companies need to look for automation to assist with certificate deployment, renewal, and lifecycle management to reduce human overhead and the risk of error as the frequency of certificate replacement increases.

As of now, GitHub and Microsoft are using two-year certificates, with microsoft.com set to be renewed in October. If they plan to keep going with their two-year policy, you can expect Safari to tell you that the website isnt secure.

See the rest here:
A change in Safari will soon prevent website owners from using TLS certificates for longer than 13 months - Gizmo Posts 24