Let's Encrypt will issue certificates valid for 64 days by default from February 10, 2027, down from 90, Help Net Security reported. Staging opens October 14, 2026, 119 days earlier, and 45-day defaults follow in 2028.
Perspective Coverage
4 publishers
- Builder
- Builder 29%
- Operator
- Operator 60%
- Investor
- Investor 11%
Reality
- Evidence88
- Adoption
- Not scored
- Hype gap0
- Incentives20
- Confidence86
Attackers who hijacked the operators of three country-code domains obtained HTTPS certificates for Google domains, Google disclosed. The company says the issuing CAs did nothing wrong, so its defence came after issuance, and it cannot promise it found every affected domain.
Perspective Coverage
8 publishers
- Builder
- Builder 24%
- Operator
- Operator 69%
- Investor
- Investor 7%
Reality
- Evidence70
- Adoption
- Not scored
- Hype gap+15
- Incentives40
- Confidence68
Cloudflare plans to become a public certificate authority and start production issuance of post-quantum Merkle Tree Certificates in the first quarter of 2027. Teams planning a post-quantum migration now have an issuer-side date to test web PKI against.
Perspective Coverage
4 publishers
- Builder
- Builder 45%
- Operator
- Operator 45%
- Investor
- Investor 10%
Reality
- Evidence50
- Adoption8
- Hype gap+30
- Incentives
- Not scored
- Confidence60
buildConfirmed2 publishers Cloudflare has agreed to buy a GlobalSign root and applied to four browser root programs to become a public certificate authority. It has not issued a certificate yet, and its post-quantum certificates are aimed at Chrome's quantum-resistant root store in early 2027.
Reality
- Evidence55
- Adoption5
- Hype gap+20
- Incentives72
- Confidence60
Cloudflare applies to become a certificate authority that issues post-quantum certificates in 2027
Cloudflare plans to become a public certificate authority and issue post-quantum Merkle Tree Certificates from early 2027. Sites it fronts will manage both kinds from one system, so the planning work falls on old devices that will never add a new root.
Reality
- Evidence45
- Adoption5
- Hype gap+20
- Incentives55
- Confidence42
Shrinking public TLS certificates to 47 days turns a 1,000-certificate estate into 21 renewals a day
DigiCert's survey of IT and security leaders puts a price on the outages that certificate expiry already causes, and it shows how unevenly enterprises are preparing for the 47-day deadline in 2029.
Reality
- Evidence42
- Adoption28
- Hype gap+18
- Incentives82
- Confidence46