Domain validation: new procedures for Certification Authorities (CAs)
Starting from 2025, the domain validation landscape will undergo significant changes that will affect how organizations manage their SSL certificates. The new regulations for domain validation, established by the CA Browser Forum, concern the procedures followed by Certification Authorities (CAs) for issuing SSL certificates.
Domain validation: new rules from 1st December 2021
The CAB Forum has approved an amendment to the Baseline Requirements, changing the rules on domain validation. From 1st December 2021, restrictions on HTTP-based validation methods will be introduced, in so much as they only prove the control of a particular host and service (not of the entire domain name).
Code Signing certificates: longer keys from 1 June 2021
As set out in the Baseline Requirements for the Issuance and Management of Publicly-Trusted Code Signing Certificates released by the CAB Forum, from 1 June 2021 RSA keys for code signing certificates will need to have a minimum size of 3072 bits.