The Hacker News

NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks

NGINX 1.30.6 and 1.31.7 fix five configuration-dependent flaws, including three memory bugs that could crash workers or enable code execution.
Help Net Security

Let’s Encrypt TLS certificate lifetimes to drop from 90 to 64 days starting February 2027

Let’s Encrypt moves to a 64-day default certificate lifetime on February 10, 2027, and admins with hardcoded renewals need to ...
GIGAZINE

Let's Encrypt details changes to certificate issuance, including new certificate chains, removal of Client Authentication EKU, and shorter certificate validity periods.

Let's Encrypt has announced details of its overall policy regarding certificates issued going forward, including 'certificate chain renewal,' 'removal of TLS client authentication EKU (Enhanced Key ...

Let’s Encrypt cuts certificate lifetimes to 64 days starting February 2027

Let’s Encrypt’s update tightens security by reducing how long compromised or improperly issued certificates remain valid.