How we ensure Cloudflare customers aren't affected by Let's Encrypt's certificate chain change
Apr 12, 2024Dina Kozlov
Summary
This post details Cloudflare's proactive approach to managing the upcoming Let's Encrypt certificate chain change. It explains how Cloudflare will migrate customer certificates to ensure compatibility with legacy devices that might not support the new chain, thereby preventing service disruptions. The post also highlights the robustness of Cloudflare's TLS certificate pipeline, emphasizing its ability to ensure certificate availability, handle CA outages, adopt best security practices like 90-day certificate lifetimes, and support modern cryptographic standards like ECDSA, all to maintain a secure and accessible internet for everyone.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack