Get the latest tech news
Six day and IP address certificate options in 2025
This year we will continue to pursue our commitment to improving the security of the Web PKI by introducing the option to get certificates with six-day lifetimes (“short-lived certificates”). We will also add support for IP addresses in addition to domain names. Our longer-lived certificates, which currently have a lifetime of 90 days, will continue to be available alongside our six-day offering. Subscribers will be able to opt in to short-lived certificates via a certificate profile mechanism being added to our ACME API.
The primary advantage of short-lived certificates is that they greatly reduce the potential compromise window because they expire relatively quickly. This will enable secure TLS connections, with publicly trusted certificates, to services made available via IP address, without the need for a domain name. Around April we will enable short-lived certificates for a small set of early adopting subscribers.
Or read this on Hacker News