Trust Agility in an Era of Transient Ties: Rethinking TLS...
summary
Concrete roadmap: root programs cap roots to 10-year root limit and server certificates shrink to 47-day server certs by 2029, forcing automation and site-specific trust boundaries. Netflix reports a working stack of automated issuance, short-lived 7-day certs, multi-CA fallback issuance and human-friendly issuance templates that eliminate manual rotation and reduce revocation pain. Android adds updatable trust in Android 14 but wide adoption lags to ~2033. Emerging standards like trust anchor identifiers enable servers to advertise supported roots so clients pick compatible chains.
AI-written summary · about
chapters (11)
- 0:00Trust agility and transient ties
- 1:17TLS certificates for server trust
- 3:49Root certificates explained
- 6:39Trust infrastructure evolution
- 9:07Shorter certificate validity impact
- 11:17Trust agility path forward
- 13:02Netflix automation and short-lived certs
- 14:51Trust boundaries for platforms
- 16:16Certificate templates for trust
- 18:05Dynamic trust negotiation
- 19:33Call to action for trust agility
related talks
31mPractical TLS Advice for Large Infrastructure
30mTrust Engineering: Building Security Leadership at Early-Stage...
27mScaling Trust: CLM Roadblocks on the Path to Post Quantum Resilience
51mEverything you learned about SSL is deprecated
07mEstablishing Digital Trust
28mTrustBase: An Architecture to Repair and Strengthen...
31mHow We Solved TLS at Scale: Self-Service, Multi-Tenant Cert-manager
16mPKI problem: who we actually trust