e-ink readers that run LineageOS? - Page 2

rkomar · 04-03-2024, 07:14 PM

You need to regularly update the certificates on a device if you want to use the web for general purposes. The trend is to go for shorter expiration dates, which means that devices with certificates that cannot be updated become useless even more quickly than before. For me, this is the number one problem with platforms that are orphaned by their manufacturers.

Frogm4n · 04-03-2024, 09:33 PM

Root certificates are valid for many years for this reason. The certificates on the websites themselves, that are signed by intermediate certs that are in turn signed by those root certs, are the ones that rotate regularly and have had their valid lifetimes shortened.

DNSB · 04-03-2024, 09:45 PM

There have been quite a few root certificates that have been invalidated for key length issues and lazy sysadmins who did not keep up with the changes. Currently there is a move to 3072 or 4096 bit keys from 2048 bit keys and quite a few bits of software will no longer accept a 1024 bit certificate as being secure. If you are a developer and using code signing, you may remember that back in 2021, the minimum key length for a code signing certificate changed to 3072 bits.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Can e-ink readers do this?	forumshrew	Which one should I buy?	2	06-10-2013 01:56 PM
reader with e-ink that can run android	FinancialWar	General Discussions	6	08-08-2012 07:26 AM
Request Ability to run android on e-ink side.	robot	enTourage Archive	28	05-06-2011 11:49 AM
Any e-ink readers that run apps	CPhill505	Which one should I buy?	8	08-27-2010 08:46 AM
Do Sony Readers Run Down When Turned Off?	WJCronon	Sony Reader	25	08-20-2007 06:47 AM

04-03-2024, 07:14 PM	#16
rkomar Wizard Posts: 2,986 Karma: 18343081 Join Date: Oct 2010 Location: Sudbury, ON, Canada Device: PRS-505, PB 902, PRS-T1, PB 623, PB 840, PB 633	You need to regularly update the certificates on a device if you want to use the web for general purposes. The trend is to go for shorter expiration dates, which means that devices with certificates that cannot be updated become useless even more quickly than before. For me, this is the number one problem with platforms that are orphaned by their manufacturers.

04-03-2024, 09:33 PM	#17
Frogm4n Zealot Posts: 105 Karma: 1015073 Join Date: Jul 2023 Device: Kindle Scribe	Root certificates are valid for many years for this reason. The certificates on the websites themselves, that are signed by intermediate certs that are in turn signed by those root certs, are the ones that rotate regularly and have had their valid lifetimes shortened.

04-03-2024, 09:45 PM	#18
DNSB Bibliophagist Posts: 35,546 Karma: 145557716 Join Date: Jul 2010 Location: Vancouver Device: Kobo Sage, Forma, Clara HD, Lenovo M8 FHD, Paperwhite 4, Tolino epos	There have been quite a few root certificates that have been invalidated for key length issues and lazy sysadmins who did not keep up with the changes. Currently there is a move to 3072 or 4096 bit keys from 2048 bit keys and quite a few bits of software will no longer accept a 1024 bit certificate as being secure. If you are a developer and using code signing, you may remember that back in 2021, the minimum key length for a code signing certificate changed to 3072 bits.

Advert