From: ldo@nz.invalid   
      
   The CA/Browser Forum (a group that includes those entities that issue   
   you with attested SSL/TLS certificates) has voted to severely shorten   
   the valid duration of its certificates from one year to just 47 days   
   .   
      
   Some see this as a revenue grab. Yes, it may be, but there are also   
   good security reasons for doing so.   
      
   The revenue-grab reason may backfire. For most purposes, a free cert   
   service like Let’s Encrypt is quite sufficient, and it’s easy enough   
   to set your system to run a cron task (or systemd timer) to   
   auto-renew. This already happens by default on a Debian installation,   
   for example.   
      
   --- SoupGate-DOS v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)