Let’s Encrypt discovers CAA bug, must revoke customer certificates

Enlarge / Unfortunately, most if not all Let’s Encrypt users will need to manually force-renew their certificates before Wednesday. It’s at least an easy process. (credit: Adobe)
On Leap Day, Let’s Encrypt announced that it had discovered a bug in its CAA (Certification Authority Authorization) code.
The bug opens up a window of time in which a certificate might be issued even if a CAA record in that domain’s DNS should prohibit it. As a result, Let’s Encrypt is erring on the side of security and safety rather than convenience and revoking any currently issued certificates it can’t be certain are legitimate, saying:
Unfortunately, this means we need to revoke the certificates that were affected by this bug, which includes one or more of your certificates. To avoid disruption, you’ll need to renew and replace your affected certificate(s) by Wednesday, March 4, 2020. We sincerely apologize for the issue.
If you’re not able to


Original URL: https://arstechnica.com/?p=1657790

Original article

Google cancels its 2020 I/O developer conference

After Facebook canceled its F8 developer conference and Google itself moved its Cloud Next event in April to a digital-only conference, it doesn’t come as a huge surprise that Google is canceling its I/O developer conference in Mountain View for 2020 as well. The company has sent an email to attendees informing them of the cancellation.  The event was originally scheduled to run from May 12 to 14 but because of concerns around the coronavirus, it is now canceling the show.
“Due to concerns around the coronavirus (COVID-19), and in accordance with health guidance from the CDC, WHO, and other health authorities, we have decided to cancel the physical Google I/O event at Shoreline Amphitheatre,” Google said in a statement. “Over the coming weeks, we will explore other ways to evolve Google I/O to best connect with and continue to build our developer community. We’ll continue to update the Google I/O


Original URL: http://feedproxy.google.com/~r/Techcrunch/~3/N7fPpQbG0hw/

Original article

Proudly powered by WordPress | Theme: Baskerville 2 by Anders Noren.

Up ↑

%d bloggers like this: