[kwlug-disc] Let's Encrypt revoking all certificates tomorrow

[jason.eckert]

They revoked their revocation plans?Irony is not dead.Sent from my Samsung device running Android (basically Linux in drag)
-------- Original message --------From: CrankyOldBugger <crankyoldbugger at gmail.com> Date: 2020-03-05  13:40  (GMT-05:00) To: KWLUG discussion <kwlug-disc at kwlug.org>, Kitchener Waterloo Cryptography Interest Group <KWCrypto at kornbluth.sobac.com> Subject: Re: [kwlug-disc] Let's Encrypt revoking all certificates tomorrow And now another change to the plan...  they're delaying the revocation:https://arstechnica.com/information-technology/2020/03/lets-encrypt-holds-off-on-revocation-of-certificates/On Tue, 3 Mar 2020 at 22:13, Jeff Smith <crankyoldbugger at gmail.com> wrote:My initial information was incorrect..  seems that we're only talking a 
small percentage of the certificates are going to be revoked.  Still, 
it's something to watch out for...



On 2020-03-03 1:39 p.m., Mikalai Birukou via kwlug-disc wrote:
> Thank you for sharing this.
>
> My understanding, from reading this and checks of my domains is that 
> only those certs affected that where issued for multiple domains (one 
> cert for several domains).
>
> My context. I used to have multi-domain certs for TLS-ing web servers. 
> No longer. Relying now on SNI checks. They exist in haproxy 
> explicitly, and nginx does SNI checks implicitly. And certbot will 
> patiently work with however many different certs you have -- again no 
> need for multi-domain certs.
>
> On 2020-03-03 1:11 p.m., CrankyOldBugger wrote:
>>
>> https://www.cyberciti.biz/security/letsencrypt-is-revoking-certificates-on-march-4/ 
>>
>>
>> Apparently they found a bug so they're revoking all affected 
>> certificates.
>>
>
>
> _______________________________________________
> kwlug-disc mailing list
> kwlug-disc at kwlug.org
> https://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://kwlug.org/pipermail/kwlug-disc_kwlug.org/attachments/20200305/9fac6612/attachment.htm>