> everyone will be so used to certificates changing all the time, and no certifi... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		precommunicator 9 months ago \| parent \| context \| favorite \| on: TLS certificate lifetimes will officially reduce t... > everyone will be so used to certificates changing all the time, and no certificate pinning anymore Browser certificate pinning is deprecated since 2018. No current browsers support HPKP. There are alternatives to pinning, DNS CAA records, monitoring CT logs.

blincoln 9 months ago [–]

Cert pinning is a very common practice for mobile apps. I'm not a fan of it, but it's how things are today. Seems likely that that will have to change with shorter cert lifetimes.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact