Hacker GitHub

← All repos

cabforum/servercert

View on GitHub ↗ ★ 241

Repository for the CA/Browser Forum Server Certificate Chartered Working Group

19 mentions on Hacker News by 13 people: 3 stories, 16 comments · first 2016-05-27 · latest 2026-02-18

Mentions per year 19 mentions · busiest year 2024 (6)
20082026
AllStoriesComments NewestTopOldest
  1. …store policy: https://www.apple.com/certificateauthority/ca_program.html Baseline Requirements: https://github.com/cabforum/servercert/blob/main/docs/BR.md There are countless examples of non-compliant certificates documented in the…
    comment by agwa · 2026-02-18 · in Google Public CA is down
  2. https://github.com/cabforum/servercert/pull/579/commits </s?
    comment by fredfish · 2025-06-25 · in Getting ready to issue IP address certificates
  3. …oups.google.com/a/groups.cabforum.org/g/servercert... And here's the CABF discussion before the vote: https://github.com/cabforum/servercert/pull/553/commits/69ce...
    comment by hackcoughgasp · 2025-04-23 · in TLS certificate lifetimes will officially reduce to 47 days
  4. …an inherent problem to the design of SSL and requires system or browser patching to fix. Likewise https://github.com/cabforum/servercert/pull/553 highlights that some browsers are very much encouraging frequent expiry and renewal of SSL…
    comment by lstamour · 2025-01-05 · in Web page annoyances that I don't inflict on you
  5. ▲ 71
    SSL certificate lifetimes are going down. Dates proposed. 45 days by 2027
    story by thunderbong · 2024-10-15 · 150 comments
  6. ▲ 2
    CA/Browser Forum SC-081: Introduce Schedule of Reducing Validity Periods
    story by throw0101d · 2024-10-14 · 0 comments
  7. ▲ 7
    WebPKI – Introduce Schedule of Reducing Validity (Of TLS Server Certificates)
    story by nickf · 2024-10-10 · 2 comments
  8. …from 5 different data centres. This should make getting a cert via BGP hijack very difficult. [1] https://github.com/cabforum/servercert/blob/main/docs/BR.md#...
    comment by michaelt · 2024-09-11 · in We spent $20 to achieve RCE and accidentally became the admins of .mobi
  9. …DOMAINS" section, so domains for dynamic DNS providers and the like wouldn't be included. [ https://github.com/cabforum/servercert/blob/main/docs/BR.md#... ]
    comment by agwa · 2024-07-30 · in DigiCert Revocation Incident (CNAME Domain Validation)
  10. …clarifications and constraints to convert X509 into something approximately fit for purpose. [1] https://github.com/cabforum/servercert
    comment by michaelt · 2024-07-30 · in All I Know About Certificates – Certificate Authority
  11. This is permitted: https://github.com/cabforum/servercert/blob/main/docs/BR.md#... But it hasn't really caught on; a lot of registrars don't seem to want the complexity of being (or integrating with) a CA, and vice versa.
    comment by Kesseki · 2023-12-02 · in Does my site need HTTPS?
  12. It is unfortunate. It's required: https://github.com/cabforum/servercert/blob/main/docs/BR.md#...
    comment by Kesseki · 2022-01-26 · in Issue with TLS-ALPN-01 Validation Method
  13. …and request the certificate up to 398 days later, without having to do domain validation again. [1] https://github.com/cabforum/servercert/blob/cda0f92ee70121fd... [2] https://github.com/cabforum/servercert/blob/cda0f92ee70121fd... [3]…
    comment by agwa · 2021-08-30 · in MarkMonitor left 60k domains for the taking
  14. …and that this is my opinion, that my opinons are bad and I should feel bad :zoidberg:. [0] https://github.com/cabforum/servercert/pull/138/commits/2b06... [1] https://en.wikipedia.org/wiki/CA/Browser_Forum [2] https://pki.goog/repository/
    comment by achew22 · 2021-03-24 · in Chrome’s address bar will use https:// by default
  15. …Section 3.2.2.5 of the BRs indicate how one can demonstrate control over the IP address. -- 1 - https://github.com/cabforum/documents/blob/master/docs/BR.md... 2 - https://www.iana.org/assignments/ipv4-address-space/ipv4-add...…
    comment by prdonahue · 2018-03-30 · in 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?
  16. …on a similar system that is in the process of being adopted by at least one standards group ( https://github.com/cabforum/documents ). I would strongly recommend looking at weasyprint ( http://weasyprint.org/ ) for HTML to PDF. It gives…
    comment by pzb · 2018-03-15 · in Say Yes to Markdown, No to MS Word
  17. …3.2.2.4.7 for DNS changes as permitted for DV validation. [0] https://www.cloudflare.com/terms/ [1] https://github.com/cabforum/documents/blob/master/docs/BR.md
    comment by prdonahue · 2016-11-02 · in Cloudflare gets wildcard certs for a domain using their DNS-only service
  18. …I believe [2] is the latest draft. [1]: https://cabforum.org/mailman/listinfo/validation [2]: https://github.com/cabforum/documents/pull/25/files?short_pa...
    comment by pfg · 2016-06-30 · in StartEncrypt considered harmful today
  19. …that are imposed on public CAs here (look specifically for references to Subscriber Agreements): https://github.com/cabforum/documents/tree/master/docs . I'd start with the "BRs" (Baseline Requirements) doc; the other, EV Guidelines are…
    comment by prdonahue · 2016-05-27 · in Symantec Issues Intermediate CA Certificate for Blue Coat Public Services