208 - Lets Encrypt on shortening certification lifetime to just 6 days!

YusufOnSecurity.com

Enjoying the content? Let us know your feedback!

In this episode we will detail the significant announcement from Let’s Encrypt – the trusted nonprofit Certificate Authority that has been at the forefront of making the web more secure.
Let’s Encrypt has revealed its plans to drastically reduce the lifetime of its TLS certificates from 90 days to just 6 days. This decision, outlined in their 2024 annual report, is aimed at strengthening the security of online communications by minimizing the risks associated with compromised keys. But what does this mean for website owners, IT administrators, and the broader cybersecurity landscape? That’s what we’ll explore in detail today.
- https://community.letsencrypt.org: 2024 ISRG Annual Report
- https://www.malwarebytes.com: 7-zip bug could allow a bypass of a windows security feature update now
- https://digital.nhs.uk: Proof-of-Concept Exploit Released for CVE-2025-0411 in 7-Zip

Be sure to subscribe!
You can also stream from https://yusufonsecurity.com
In there, you will find a list of all previous episodes in there too.