GoKawiil
Tech News
Let's Encrypt will cut the default lifespan of its free SSL/TLS certificates from 90 to 64 days starting February 10, 2027, with a testing phase opening October 14, 2026 for admins to trial the change. The certificate authority also plans a further reduction to 45-day defaults in 2028.
Hackers gained control over DNS records for Google domains and ccTLDs in Ghana, American Samoa, and Sierra Leone by infiltrating third-party registries. They obtained valid HTTPS certificates for these domains, enabling impersonation and malicious content delivery. Google responded by revoking the certificates and working with authorities to prevent further misuse, affirming that its own systems remained unaffected.
Gitea has released version 28.0.0, renaming its versioning scheme to drop the historical '1.' prefix so this release is 28.0.0 instead of 1.28.0. The update adds audit logging, bot accounts, HTTPS deploy tokens, admin user impersonation, code-owner approval rules, diff file filters, and an Actions queue view, alongside unspecified security fixes to be detailed later. Release builds drop support for 32-bit x86, gogit, and armhf Snap packages, and network operations for migrations, mirrors, webhooks and OAuth2 now route through a new internal proxy with configurable egress allow/block lists.
Cybersecurity guidance highlights that VPNs are most valuable in two situations: connecting to unsecured public Wi-Fi and preventing internet service providers from tracking browsing habits. Encrypting traffic through a VPN tunnel blocks eavesdroppers on shared networks and stops ISPs from logging and selling usage data to third parties, per FTC research cited in the coverage.