In a shocking twist worthy of a soap opera finale, Let's Encrypt will put TLS Client Authentication Certificates out of their misery by 2026. 🎭📉 Apparently, simplicity reigns supreme, because who needs security when you can just skip right to the easy stuff? 🛡️🔚
https://letsencrypt.org/2025/05/14/ending-tls-client-authentication/ #LetsEncrypt #TLSClientAuth #SecuritySimplified #SoapOperaTech #FutureOfSecurity #HackerNews #ngated
https://letsencrypt.org/2025/05/14/ending-tls-client-authentication/ #LetsEncrypt #TLSClientAuth #SecuritySimplified #SoapOperaTech #FutureOfSecurity #HackerNews #ngated
Ending TLS Client Authentication Certificate Support in 2026
Let’s Encrypt will no longer include the “TLS Client Authentication” Extended Key Usage (EKU) in our certificates beginning in 2026. Most users who use Let’s Encrypt to secure websites won’t be affected and won’t need to take any action. However, if you use Let’s Encrypt certificates as client certificates to authenticate to a server, this change may impact you. To minimize disruption, Let’s Encrypt will roll this change out in multiple stages, using ACME Profiles: