Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
mhoye (mhoye@mastodon.social)'s status on Friday, 16-May-2025 23:49:10 JST mhoye

As much as I admire the work of the LetsEncrypt team, making a policy change that effectively raises the cost of competitive and independent agency at the behest of a browser team that's at risk of being split off from their corporate sponsors specifically because of anticompetitive behavior in the domain of that agency... this might be technically justifiable, but it's not the right decision for an organization being run for the public's benefit.
https://letsencrypt.org/2025/05/14/ending-tls-client-authentication/
In conversation about 18 hours ago from mastodon.social permalink
Attachments
1. Domain not in remote thumbnail source whitelist: letsencrypt.org
  
  Ending TLS Client Authentication Certificate Support in 2026
  
  Let’s Encrypt will no longer include the “TLS Client Authentication” Extended Key Usage (EKU) in our certificates beginning in 2026. Most users who use Let’s Encrypt to secure websites won’t be affected and won’t need to take any action. However, if you use Let’s Encrypt certificates as client certificates to authenticate to a server, this change may impact you. To minimize disruption, Let’s Encrypt will roll this change out in multiple stages, using ACME Profiles:

Feeds