A developer crafted a 'protest certificate' for maurycyz.com by choosing a private key whose resulting public key bytes spell out a readable ASCII message criticizing the SSL/TLS certificate system, then had it issued normally through Let's Encrypt. The post notes certificate authorities never verify that a submitted public key was generated from truly random data, citing a prior case where a CA issued a certificate using the trivial private key value '4'.
maurycyz.com
· 2026-11-10
Let's Encrypt announced it will add two more remote network perspectives for domain validation, bringing the total validation requests to seven: one from a primary datacenter and six from remote locations, up from four previously. The change rolls out in staging on October 27, 2026 and in production on November 10, 2026.
community.letsencrypt.org
· 2026-10-19
A group of Anthropic researchers discovered that the mysterious seed values behind NIST's P-192 through P-521 elliptic curves were generated using the POSIX drand48 random number generator seeded with a 1997-98 Unix timestamp, not from hashed English sentences as long believed. They claimed the full bounty offered three years ago for solving the puzzle and chose to donate it to the Internet Security Research Group, which runs Let's Encrypt, tripling its value to $36,864.
words.filippo.io
· 2026-10-16
Let's Encrypt will reduce the default validity period for its TLS certificates from 90 days to 64 days starting February 10, 2027, unless administrators already opt for shorter 45- or six-day certificates. Existing certificates remain valid until expiration, with the last 90-day certificate expected to expire by May 11, 2027, and no certificates will be revoked during the transition. The organization plans a further cut to 45 days by 2028, and will shrink domain authorization reuse windows from 30 days to 10 days in 2027, and eventually to seven hours by 2028.
it.slashdot.org
· 2026-10-12
Let's Encrypt will cut the default lifespan of its free SSL/TLS certificates from 90 to 64 days starting February 10, 2027, with a testing phase opening October 14, 2026 for admins to trial the change. The certificate authority also plans a further reduction to 45-day defaults in 2028.
arstechnica.com
· 2026-10-08
A technical post walks through building a self-hosted alternative to services like ngrok or Cloudflare Quick Tunnels, relying only on standard OpenSSH remote port forwarding and an Nginx reverse proxy rather than proprietary clients or servers. It details configuring SSH to forward a local port to a remote server, setting up Nginx to route wildcard subdomains to that port, and obtaining a Let's Encrypt wildcard certificate via DNS-01 challenges on Route 53.
vincent.bernat.ch
· 2026-10-04
A developer detailed a step-by-step process for running a personal website on OpenBSD hosted on DigitalOcean, using the platform's custom image upload feature to install OpenBSD's miniroot image and configuring the server with httpd and Let's Encrypt for HTTPS. The setup costs about $4.24 per month after tax, positioned as an alternative to free static hosting services like GitHub Pages or Cloudflare Pages.
nil.wallyjones.com
· 2026-08-25
GoKawiil