diff --git a/content/zh-cn/docs/cert-lifetimes.md b/content/zh-cn/docs/cert-lifetimes.md index b961949fc..9c03a3e0c 100644 --- a/content/zh-cn/docs/cert-lifetimes.md +++ b/content/zh-cn/docs/cert-lifetimes.md @@ -1,9 +1,29 @@ --- -title: Certificate Lifetime Rationale and Plans +title: 证书有效期背后的原因与计划 slug: cert-lifetimes -date: 2026-07-22 lastmod: 2026-07-22 -show_lastmod: false -untranslated: 1 +show_lastmod: 1 --- +## 目前的证书有效期 + +从 2015 年创立以来,Let's Encrypt 就提供了 90 天有效的证书。 这一默认有效期将保持不变,我们签发的大部分证书有效期也都是 90 天。 + +另一方面,所有用户都可以选择申请 6 天有效的短期证书。 + +详情请参见[证书配置文档](/docs/profiles/)。 + +## 未来的计划 + +根据[行业规则](https://cabforum.org/working-groups/server/baseline-requirements/documents/),从 2029 年 3 月 15 日起,证书有效期不能超过 47 天。 因此,我们将[于 2028 年 2 月将证书有效期上限缩短至 45 天](/2025/12/02/from-90-to-45.html)。 + +## 为什么要缩短有效期? + +常有人问我们为什么只提供 90 天有效的证书,甚至还要进一步缩短有效期。 + +缩短有效期的主要原因有两个: + +- 减轻签发不当和密钥泄露导致的危害。 即使证书的签发流程存在问题,或者在签发前后发生密钥泄露,这份证书产生影响的时间也会比较短。 +- 鼓励自动化,从而大幅提升易用性与可靠性。 只要将证书管理流程自动化,有效期的长短就不会造成任何不便。 + +起初我们选择将有效期定为 90 天,因为 90 天一方面足够短,能够促进自动化;另一方面也足够长,手动续期同样可行。 尽管我们希望推动自动化,但这只是次要目标,更重要的还是普及 HTTPS。 当时自动签发证书远不如现在一般常见,原因之一就是工具生态(如 ACME 客户端)不成熟。 而现如今情况已大不相同,全自动的证书管理流程屡见不鲜,工具生态也更加丰富。 因此,我们现在有更为充分的条件推行有效期短于 90 天的证书。 diff --git a/i18n/da.toml b/i18n/da.toml index bc9fc3913..60af0c425 100644 --- a/i18n/da.toml +++ b/i18n/da.toml @@ -569,7 +569,7 @@ other = "her" other = "Læs mere {{ .sponsorshipLink }}." [donate_2026_donate_stock_title] -other = "Donate stock" +other = "Donér værdipapirer" [donate_2026_donate_stock_intro_text] other = "Værdipapirer eller investeringsforeningsandele, som du har ejet i mere end et år, kan være fremragende velgørenhedsgaver." @@ -587,7 +587,7 @@ other = "Kontonavn:" other = "Internet Security Research Group" [donate_2026_donate_stock_account_number] -other = "Account #:" +other = "Konto #:" [donate_2026_donate_stock_account_number_value] other = "44865458" @@ -605,25 +605,25 @@ other = "US Skatte ID #:" other = "46-3344200" [donate_2026_donate_stock_outro_text] -other = "Please contact us if you are transferring securities at {{ .donateEmailLink }} to ensure that we are able to credit you for your gift." +other = "Kontakt os, hvis du overfører værdipapirer på {{ .donateEmailLink }} for at sikre, at vi er i stand til at kreditere dig for din gave." [donate_2026_donate_stock_online_text] -other = "You can also donate stock in a couple clicks via {{ .givingBlockLink }}. We do incur processing fees through these transactions, so please consider covering the fees to help ensure your gift has the greatest impact." +other = "Du kan også donere værdipapirer med et par klik via {{ .givingBlockLink }}. Vi pådrager os ekspeditionsgebyrer gennem disse transaktioner, så overvej venligst at dække gebyrerne for at sikre, at din gave har den største effekt." [donate_2026_donate_cryptocurrency_title] -other = "Donate cryptocurrency" +other = "Doner kryptovaluta" [donate_2026_donate_cryptocurrency_text] -other = "We are able to accept most cryptocurrency by visiting {{ .givingBlockLink }}. We do incur processing fees through these transactions, so please consider covering the fees to help ensure your gift has the greatest impact." +other = "Vi kan acceptere de fleste kryptovaluta ved at besøge {{ .givingBlockLink }}. Vi pådrager os ekspeditionsgebyrer gennem disse transaktioner, så overvej venligst at dække gebyrerne for at sikre, at din gave har den største effekt." [donate_2026_donor_advised_funds_title] -other = "Donor Advised Funds (DAFs)" +other = "Donorforvaltede Fonde (DAF)" [donate_2026_donor_advised_funds_text] -other = "Simply inform your DAF sponsor that you’d like to make a gift to:" +other = "Du skal blot informere din DAF sponsor om, at du gerne vil give en gave til:" [donate_2026_donor_advised_funds_online_text] -other = "You can also donate through your DAF via DAFpay in a couple clicks via {{ .givingBlockLink }}. We do incur processing fees this way, so please consider covering the fees to help ensure your gift has the greatest impact." +other = "Du kan også donere gennem din DAF via DAFpay med et par klik via {{ .givingBlockLink }}. Vi pådrager os ekspeditionsgebyrer på denne måde, så overvej venligst at dække gebyrerne for at sikre, at din gave har den største effekt." [donate_2026_org_name] other = "Internet Security Research Group"