SECURITY

• Reduce the maximum validity period for TLS/SSL server certificates

  Question: What would be the impact on your organization if the CA/Browser Forum approves a ballot reducing the maximum validity period for SSL/TLS server certificates from the current 825 days (27 months) at present to 397 days (13 months), effective for new certificates issued on or after March 1, 2020? (Existing certificates will remain valid for their full term).

  read more

  ---

• Response to: Our Security Auditor Is an Idiot

  Some thoughts on the SO question about the idiot security consultant that demanded a list of everyone’s plaintext password plus some rather impossible things.

  read more

  ---