Skip to content

Updates in DA,ZH-CN #2284

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ludekjanda merged 1 commit into from
Aug 1, 2026
+33 −13
Merged

Updates in DA,ZH-CN #2284

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
28 changes: 24 additions & 4 deletions content/zh-cn/docs/cert-lifetimes.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,9 +1,29 @@
---
title: Certificate Lifetime Rationale and Plans
title: 证书有效期背后的原因与计划
slug: cert-lifetimes
date: 2026-07-22
lastmod: 2026-07-22
show_lastmod: false
untranslated: 1
show_lastmod: 1
---

## 目前的证书有效期

从 2015 年创立以来，Let's Encrypt 就提供了 90 天有效的证书。 这一默认有效期将保持不变，我们签发的大部分证书有效期也都是 90 天。

另一方面，所有用户都可以选择申请 6 天有效的短期证书。

详情请参见[证书配置文档](/docs/profiles/)。

## 未来的计划

根据[行业规则](https://cabforum.org/working-groups/server/baseline-requirements/documents/)，从 2029 年 3 月 15 日起，证书有效期不能超过 47 天。 因此，我们将[于 2028 年 2 月将证书有效期上限缩短至 45 天](/2025/12/02/from-90-to-45.html)。

## 为什么要缩短有效期？

常有人问我们为什么只提供 90 天有效的证书，甚至还要进一步缩短有效期。

缩短有效期的主要原因有两个：

- 减轻签发不当和密钥泄露导致的危害。 即使证书的签发流程存在问题，或者在签发前后发生密钥泄露，这份证书产生影响的时间也会比较短。
- 鼓励自动化，从而大幅提升易用性与可靠性。 只要将证书管理流程自动化，有效期的长短就不会造成任何不便。

起初我们选择将有效期定为 90 天，因为 90 天一方面足够短，能够促进自动化；另一方面也足够长，手动续期同样可行。 尽管我们希望推动自动化，但这只是次要目标，更重要的还是普及 HTTPS。 当时自动签发证书远不如现在一般常见，原因之一就是工具生态（如 ACME 客户端）不成熟。 而现如今情况已大不相同，全自动的证书管理流程屡见不鲜，工具生态也更加丰富。 因此，我们现在有更为充分的条件推行有效期短于 90 天的证书。
18 changes: 9 additions & 9 deletions i18n/da.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -569,7 +569,7 @@ other = "her"
other = "Læs mere {{ .sponsorshipLink }}."

[donate_2026_donate_stock_title]
other = "Donate stock"
other = "Donér værdipapirer"

[donate_2026_donate_stock_intro_text]
other = "Værdipapirer eller investeringsforeningsandele, som du har ejet i mere end et år, kan være fremragende velgørenhedsgaver."
Expand All @@ -587,7 +587,7 @@ other = "Kontonavn:"
other = "Internet Security Research Group"

[donate_2026_donate_stock_account_number]
other = "Account #:"
other = "Konto #:"

[donate_2026_donate_stock_account_number_value]
other = "44865458"
Expand All @@ -605,25 +605,25 @@ other = "US Skatte ID #:"
other = "46-3344200"

[donate_2026_donate_stock_outro_text]
other = "Please contact us if you are transferring securities at {{ .donateEmailLink }} to ensure that we are able to credit you for your gift."
other = "Kontakt os, hvis du overfører værdipapirer på {{ .donateEmailLink }} for at sikre, at vi er i stand til at kreditere dig for din gave."

[donate_2026_donate_stock_online_text]
other = "You can also donate stock in a couple clicks via {{ .givingBlockLink }}. We do incur processing fees through these transactions, so please consider covering the fees to help ensure your gift has the greatest impact."
other = "Du kan også donere værdipapirer med et par klik via {{ .givingBlockLink }}. Vi pådrager os ekspeditionsgebyrer gennem disse transaktioner, så overvej venligst at dække gebyrerne for at sikre, at din gave har den største effekt."

[donate_2026_donate_cryptocurrency_title]
other = "Donate cryptocurrency"
other = "Doner kryptovaluta"

[donate_2026_donate_cryptocurrency_text]
other = "We are able to accept most cryptocurrency by visiting {{ .givingBlockLink }}. We do incur processing fees through these transactions, so please consider covering the fees to help ensure your gift has the greatest impact."
other = "Vi kan acceptere de fleste kryptovaluta ved at besøge {{ .givingBlockLink }}. Vi pådrager os ekspeditionsgebyrer gennem disse transaktioner, så overvej venligst at dække gebyrerne for at sikre, at din gave har den største effekt."

[donate_2026_donor_advised_funds_title]
other = "Donor Advised Funds (DAFs)"
other = "Donorforvaltede Fonde (DAF)"

[donate_2026_donor_advised_funds_text]
other = "Simply inform your DAF sponsor that you’d like to make a gift to:"
other = "Du skal blot informere din DAF sponsor om, at du gerne vil give en gave til:"

[donate_2026_donor_advised_funds_online_text]
other = "You can also donate through your DAF via DAFpay in a couple clicks via {{ .givingBlockLink }}. We do incur processing fees this way, so please consider covering the fees to help ensure your gift has the greatest impact."
other = "Du kan også donere gennem din DAF via DAFpay med et par klik via {{ .givingBlockLink }}. Vi pådrager os ekspeditionsgebyrer på denne måde, så overvej venligst at dække gebyrerne for at sikre, at din gave har den største effekt."

[donate_2026_org_name]
other = "Internet Security Research Group"
Expand Down
Loading