Google plans to limit the lifespan of digital certificates from a maximum of two years to just over one year, with the aim of reducing the window of opportunity for attackers to use fraudulent certificates to hijack HTTPS sites, according to a proposal it put forward last week. The policy change would make short validity periods a requirement in Chrome and set a de facto standard across the web.
















