The CA/Browser Forum has officially voted to amend the TLS Baseline Requirements to set a schedule for shortening both the lifetime of TLS certificates.
  • Rob Bos@lemmy.caEnglish
    3·
    14 days ago

    Not all DNS hosts support that. Webnames.ca, looking at you…

    Also my workplace hosts their own dns and I think it will be a cold day in hell before they let me do automated updates.

    • exu@feditown.comOPEnglish
      6·
      13 days ago

      Any DNS host that doesn’t support automation either starts building now or goes out of business when short certs are implemented.

    • sugar_in_your_tea@sh.itjust.worksEnglish
      2·
      13 days ago

      Sure, but it’s really nice if it does.

      I use Cloudflare, and my login token only supports editing DNS records, which is nice. If yours doesn’t, it may be worth switching to one that does. There are lots of options and many of them have a reasonable API.