SSL Review: August 2020

Sep

21

2020

Time to read

Read so far

Written by:

Bruce Morton

Time to read

Written by:

ssl-review-august_blog_1000x420

Entrust's monthly SSL review covers SSL/TLS discussions – recaps news, trends, and opinions from the industry.

398-Day Certificate Validity

Apple to Enforce 1-Year Limit on SSL/TLS Certificate Lifetimes on September 1, 2020; Mozilla and Google to Follow Suit

Deprecation of OU field

DigiCert will deprecate the Organizational Unit field

CA/Browser Forum discusses Revisions to OU Requirements

Bulletproof TLS Newsletter #68

Great Firewall of China blocks encrypted SNI extension

Other News & Notes

Google catches up to AWS and steals a march on Azure with introduction of cloudy Certificate Authority Service

China is now blocking all encrypted HTTPS traffic that uses TLS 1.3 and ESNI

The Day the Music Died: Certificate Expiration Takes Down Spotify

OpenSSL has an SSL/TLS heartbeat read overrun aka 64kb memory leak

TLS Poison: When TLS Hacks You – presented at Blackhat USA 2020

TLS/SSL Certificates

photo-bruce-morton

Bruce Morton

Director for Certificate Services

Bruce Morton is a pioneering figure in the PKI and digital certificate industry. He currently serves as Director for Certificate Services at Entrust, where he has been employed since 1997. His day-to-day responsibilities include managing standards implementations, overseeing Entrust’s policy authority, and monitoring Entrust Certificate Services for industry compliance.

View all of Bruce's Posts