SSL/TLS Review: August 2020

Interesting SSL/TLS reviews and discussions — recaps news, trends and opinions from the industry.

398-Day Certificate Validity

• Apple to Enforce 1-Year Limit on SSL/TLS Certificate Lifetimes on September 1, 2020; Mozilla and Google to Follow Suit

Deprecation of OU field

• DigiCert will deprecate the Organizational Unit field
• CA/Browser Forum discusses Revisions to OU Requirements

Bulletproof TLS Newsletter #68

• Great Firewall of China blocks encrypted SNI extension

Other News & Notes

• Google catches up to AWS and steals a march on Azure with introduction of cloudy Certificate Authority Service
• China is now blocking all encrypted HTTPS traffic that uses TLS 1.3 and ESNI
• The Day the Music Died: Certificate Expiration Takes Down Spotify
• OpenSSL has an SSL/TLS heartbeat read overrun aka 64kb memory leak
• TLS Poison: When TLS Hacks You – presented at Blackhat USA 2020