The CA/Browser Forum has recently approved a significant change to the maximum validity period of TLS certificates, reducing it to just 47 days by March 2029. This decision marks a pivotal shift in the management of digital certificates, emphasising the need for robust automation to handle the increased frequency of renewals.
Category: Blogs
The UK federation is arguably one of the largest SAML federations in the Research and Education sector, with over 1200 member organisations spanning Higher Education (HE) and Further Education (FE), and with significant representation from the research and commercial sectors. We are a trust broker. A level playing field. We help people securely access […]
In this blog, we’ll provide you with an update about what is happening with the Jisc certificate service, what it means for you, and how we plan to assist you going forward. We’re here to support you every step of the way and truly appreciate your patience and understanding as we work through these changes […]
This blog is relating to the communication sent on Thursday 16th January 2025 and was last updated on 16/01/2025 at 14:24pm. In this FAQ, we’ll answer your questions about the service discontinuation, what it means for you, and how we’re here to assist during this period. From details on your subscriptions and services to […]
This blog is relating to the communication sent on Monday 9th December and was last updated on 23/12/2024 at 11:55am. In this FAQ, we’ll address your questions about what is happening, what it means for you, and how we plan to assist you through the transition. From understanding what happens to your subscriptions and services […]
When to Choose a Free SSL/TLS Certificate (Like Let’s Encrypt) vs. a Paid Certificate Authority: What You Need to Know Contents: Free vs. Paid-for SSL/TLS Certificates Caveats when using Let’s Encrypt Other certificate use cases In today’s digital world, securing websites with SSL/TLS certificates is essential. Browsers and search engines penalise unsecured sites, and […]
A recent incident affecting a small number of entities in the UK federation has alerted us to some issues related to the distribution of default cryptographic keys. The following advice applies to both service providers (SP) and identity providers (IdP). The risk of using a default key is that someone may impersonate you. As […]