Everything you learned about SSL is deprecated
summary
Modern TLS replaces decades of complexity: TLS 1.3 cuts ~37 cipher suites to five and enforces perfect forward secrecy via Diffie‑Hellman so stolen long‑term keys can’t decrypt recorded traffic; Let’s Encrypt plus the ACME protocol automates issuance and drives 60% market share, but revocation (OCSP/stapling) remains unreliable. Certificate lifetimes drop to 200 days in March 2026, 100 days next year, 47 days by 2029, and real outages still happen—Epic Games takes 5.5 hours and 25 people to fully recover—so automated issuance plus automated distribution is now mandatory.
AI-written summary · about
chapters (8)
- 0:00SSL evolution and deprecated practices
- 3:43SSL in the late 1990s
- 12:12Security failures 2005-2013
- 20:41Certificate transparency and CA collapse
- 33:05Let’s Encrypt and automation
- 41:08Apple’s 398-day certificates
- 44:36Future of certificate lifetimes
- 49:11Quantum threat to encryption
related talks
01h 00m25 Years of SSL - Secure(ish) Sockets Layer
53m25 Years of SSL - Secure(ish) Sockets Layer
53mHansel and Gretel do TLS
45mUnlocking The Secrets Of TLS
58m25 Years of SSL - Secure(ish) Sockets Layer
20mTrust Agility in an Era of Transient Ties: Rethinking TLS...
39mSSL/TLS For Mere Mortals
56mSSL/TLS for Mortals