Impacts of Shortened Certificate Lifespans

Apple's proposal to reduce the maximum certificate lifespan to 45 days has raised concerns among system administrators. This change could significantly alter traditional workflows, particularly for those accustomed to manually managing SSL certificates from vendors. For instance, with automation tools like Let's Encrypt already renewing certificates monthly, the proposed standard may only require adjustments for those not yet automated, thereby eliminating inefficient practices. While some argue that transitioning to shorter lifetimes will improve security, others worry about the potential complications for applications that struggle with frequent certificate updates.