Google recently announced its intentions to reduce the maximum possible validity for public TLS (also known as SSL) certificates to 90 days, down from 398 days. This is not an announcement to ignore because the drop will mean major changes for the industry in the year ahead, and organizations are well-advised to begin preparations now.
So, what happened? On March 3, Google shared its “Moving Forward, Together” roadmap with the intention to reduce the maximum public TLS certificate validity to 90 days in either “a future policy update or a CA/B Forum Ballot Proposal,” a subtle but important detail worth understanding.
