{"id":150385,"date":"2025-12-02T23:11:56","date_gmt":"2025-12-02T21:11:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej"},"modified":"2025-12-02T23:11:56","modified_gmt":"2025-12-02T21:11:56","slug":"lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej","title":{"rendered":"Let's Encrypt r\u00e9duira la dur\u00e9e de validit\u00e9 des certificats \u00e0 45 jours","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

L'autorit\u00e9 de certification \u00e0 but non lucratif Let's Encrypt, contr\u00f4l\u00e9e par la communaut\u00e9 et fournissant des certificats gratuitement \u00e0 tous, a annonc\u00e9 son intention de r\u00e9duire progressivement la dur\u00e9e de validit\u00e9 des certificats TLS d\u00e9livr\u00e9s de 90 \u00e0 45 jours. Le 10 f\u00e9vrier 2027, la dur\u00e9e de validit\u00e9 des certificats sera r\u00e9duite \u00e0 64 jours, et le 16 f\u00e9vrier 2028 \u00e0 45 jours. La possibilit\u00e9 d'obtenir des certificats d'une dur\u00e9e de 45 jours sera disponible \u00e0 partir du 13 mai 2026. <\/p>\n

Parall\u00e8lement, la p\u00e9riode de validit\u00e9 de l'autorisation sera \u00e9galement r\u00e9duite : le 10 f\u00e9vrier 2027, elle sera r\u00e9duite de 30 \u00e0 10 jours, puis le 16 f\u00e9vrier 2028, de 10 jours \u00e0 7 heures. La p\u00e9riode de validit\u00e9 de l'autorisation fait r\u00e9f\u00e9rence au temps apr\u00e8s la confirmation de ses droits sur. domaine<\/a>, durant lequel le certificat peut \u00eatre d\u00e9livr\u00e9 sans passer par de nouveaux contr\u00f4les. Une fois ce d\u00e9lai \u00e9coul\u00e9, une nouvelle confirmation des droits est requise. <\/p>\n

La raison de la r\u00e9duction de la dur\u00e9e de validit\u00e9 des certificats est due aux nouvelles exigences de l'association CA\/Browser Forum, que les fabricants de navigateurs et les autorit\u00e9s de certification doivent respecter. Une r\u00e9duction similaire de la dur\u00e9e de validit\u00e9 sera mise en \u0153uvre par toutes les autorit\u00e9s de certification. Le CA\/Browser Forum a fix\u00e9 la date limite de mise en \u0153uvre \u00e0 mars 2029, et la dur\u00e9e maximale de validit\u00e9 d'un certificat \u00e0 47 jours. Apr\u00e8s mars 2029, le traitement dans les navigateurs des nouveaux certificats dont la dur\u00e9e de validit\u00e9 d\u00e9passe 47 jours entra\u00eenera des erreurs de type \u00ab ERR_CERT_VALIDITY_TOO_LONG \u00bb. <\/p>\n

Parmi les avantages du passage aux certificats \u00e0 courte dur\u00e9e de vie, on note la possibilit\u00e9 de r\u00e9duire le temps d'impl\u00e9mentation des nouveaux algorithmes cryptographiques en cas de d\u00e9couverte de vuln\u00e9rabilit\u00e9s dans ceux actuellement en vigueur, ainsi qu'une s\u00e9curit\u00e9 accrue. Par exemple, en cas de fuite non d\u00e9tect\u00e9e d'un certificat \u00e0 la suite d'une violation de s\u00e9curit\u00e9, les certificats \u00e0 courte dur\u00e9e de vie emp\u00eacheront les attaquants de contr\u00f4ler le trafic de la victime pendant une longue p\u00e9riode ou d'utiliser les certificats pour effectuer du phishing. Des v\u00e9rifications plus fr\u00e9quentes de la possession du domaine et la r\u00e9duction des dur\u00e9es de validit\u00e9 des certificats diminueront \u00e9galement la probabilit\u00e9 que le certificat continue d'\u00eatre valide apr\u00e8s que les informations qu'il contient aient perdu leur pertinence, et r\u00e9duiront le risque de diffusion de certificats mal \u00e9mis. <\/p>\n

En raison de la r\u00e9duction de la dur\u00e9e de validit\u00e9 des certificats, Let's Encrypt a conseill\u00e9 aux utilisateurs de ne pas renouveler les certificats manuellement, mais de passer \u00e0 des syst\u00e8mes de gestion des certificats automatiques. Les utilisateurs utilisant d\u00e9j\u00e0 des syst\u00e8mes automatis\u00e9s doivent s'assurer que leurs outils prennent correctement en charge les certificats \u00e0 dur\u00e9e de validit\u00e9 r\u00e9duite. Pour coordonner la mise \u00e0 jour automatique en temps opportun des certificats, les administrateurs peuvent utiliser l'extension du protocole ARI (ACME Renewal Information), qui permet d'obtenir des informations sur la n\u00e9cessit\u00e9 de mettre \u00e0 jour les certificats et de choisir le meilleur moment pour cela. Il est \u00e9galement judicieux de mettre en place un syst\u00e8me de surveillance pour d\u00e9tecter les situations o\u00f9 le certificat n'a pas \u00e9t\u00e9 mis \u00e0 jour \u00e0 temps. <\/p>\n

Pour faciliter la v\u00e9rification des droits sur un domaine, le projet Let's Encrypt pr\u00e9voit d'introduire en 2026 une nouvelle m\u00e9thode de validation DNS-PERSIST-01, qui, contrairement aux m\u00e9thodes HTTP-01 et DNS-01, ne n\u00e9cessite pas de mise \u00e0 jour des informations \u00e0 chaque v\u00e9rification et n'exige pas que le client ACME ait acc\u00e8s \u00e0 l'infrastructure web ou au serveur DNS. Avec PERSIST-01, il suffit d'ajouter une certaine entr\u00e9e TXT dans le DNS une seule fois ('_validation-persist.example.com. IN TXT (\"ca.example; accounturi=https:\/\/ca.example\/acct\/123\")') et le client ACME pourra proc\u00e9der \u00e0 l'autorisation sans mise \u00e0 jour des donn\u00e9es dans le DNS.
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let’s Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043f\u043e\u044d\u0442\u0430\u043f\u043d\u043e \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0432\u044b\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0441 90 \u0434\u043e 45 \u0434\u043d\u0435\u0439. 10 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2027 \u0433\u043e\u0434\u0430 \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u043a\u0440\u0430\u0449\u0451\u043d \u0434\u043e 64 \u0434\u043d\u0435\u0439, \u0430 16 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2028 \u0433\u043e\u0434\u0430 — \u0434\u043e 45 \u0434\u043d\u0435\u0439. \u041e\u043f\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 45 \u0434\u043d\u0435\u0439, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-150385","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Let's Encrypt r\u00e9duira la dur\u00e9e de validit\u00e9 des certificats \u00e0 45 jours | ProHoster","description":"L'autorit\u00e9 de certification \u00e0 but non lucratif Let's Encrypt, contr\u00f4l\u00e9e par la communaut\u00e9 et fournissant des certificats gratuitement \u00e0 tous ceux qui le souhaitent, a annonc\u00e9 sa d\u00e9cision de r\u00e9duire progressivement la dur\u00e9e de validit\u00e9 des certificats TLS d\u00e9livr\u00e9s.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Let&apos;s Encrypt \u0443\u043c\u0435\u043d\u044c\u0448\u0438\u0442 \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0434\u043e 45 \u0434\u043d\u0435\u0439 | ProHoster","og:description":"\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let's Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043f\u043e\u044d\u0442\u0430\u043f\u043d\u043e \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0432\u044b\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0441.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/lets-encrypt-umenshit-srok-dejstviya-sertifikatov-do-45-dnej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-12-02T21:11:56+00:00","article:modified_time":"2025-12-02T21:11:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"150385","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-03-05 11:16:40","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 16:22:20","updated":"2026-03-05 11:16:40","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/150385","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=150385"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/150385\/revisions"}],"predecessor-version":[{"id":163206,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/150385\/revisions\/163206"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=150385"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=150385"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=150385"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}