logoalt Hacker News

everfrustratedyesterday at 9:35 PM1 replyview on HN

From https://letsencrypt.org/2025/05/14/ending-tls-client-authent...

"This change is prompted by changes to Google Chrome’s root program requirements, which impose a June 2026 deadline to split TLS Client and Server Authentication into separate PKIs. Many uses of client authentication are better served by a private certificate authority, and so Let’s Encrypt is discontinuing support for TLS Client Authentication ahead of this deadline."

TL;DR blame Google


Replies

bawolffyesterday at 10:11 PM

Google didn't force lets encrypt to totally get out of the client cert business, they just decided it wasn't worth the effort anymore.

show 3 replies