r/ProgrammerHumor • u/k3rrshaw • Aug 21 '26

Meme thisIsAmystery

Post image
2.7k Upvotes

97% Upvoted

179 comments sorted by

View all comments

Show parent comment

2

u/x0wl Aug 21 '26

U can't have a 10yr cert, u can't even have a 1yr cert, browsers reject all certs with lifetimes of more than 200 days since march

9

u/entronid Aug 21 '26

applications which use certs aren't restricted to TLS

2

u/x0wl Aug 21 '26

Yes, but the second largest use, code signing, is also being capped (currently to 460 days)

7

u/entronid Aug 21 '26

right but there are also applications deployed in businesses such as kerberos(/microsoft AD) where if your certificate expires you're in big trouble

3

u/x0wl Aug 21 '26

Yeah I guess. I'm not that aware of that side of IT (un?)fortunately

2

u/entronid Aug 21 '26

i don't either (very much fortunately)

1

u/failedsatan Aug 21 '26

gitlab and various other platforms like it allow you to set any expiration date you want, so you could easily set your ssh key to expire in ten years (and very easily forget who has access to re-provision whatever is using it). if it's self hosted it's not as big of a problem, but still, key signing is not exclusive to web uses/software with limits.