Post by Jan Wildeboer 😷<img src="https://takahe.blankpad.net/media/emoji/social.wildeboer.net/krulorange.png" class="emoji" alt="Emoji krulorange">

30d

Dear #Letsencrypt, you helped secure millions and millions of servers, not just web servers. But your announcement at https://letsencrypt.org/2025/05/14/ending-tls-client-authentication/ about ending Ending TLS Client Authentication Certificate Support in 2026 because Google changes their requirements would result in your certificates becoming a risk for SMTP servers. You are literally risking an email collapse for many mailserver owners just to please Google? Please think again. Please.

1/5

After this change is complete, only TLS Server Authentication will be available from Let’s Encrypt.

This change is prompted by changes to Google Chrome’s root program requirements, which impose a June 2026 deadline to split TLS Client and Server Authentication into separate PKIs. Many uses of client authentication are better served by a private certificate authority, and so Let’s Encrypt is discontinuing support for TLS Client Authentication ahead of this deadline.

ALT

Edited 30d ago

0 0 2 View Post & Replies See Original