Apparently this is coming from Apple, which makes sense considering their stance on security.
I still think more enforcement and standards around IoT SSL are the way to go, with shorter timelines not necessarily more beneficial.
Let's face it, whoever is renewing every 90d is going to be renewing every 45d just fine.
It's the devices and companies that use yearly expiries (and still PAY FOR CERTS!) or don't use SSL at all that are the problem.
I still think more enforcement and standards around IoT SSL are the way to go, with shorter timelines not necessarily more beneficial.
Let's face it, whoever is renewing every 90d is going to be renewing every 45d just fine. It's the devices and companies that use yearly expiries (and still PAY FOR CERTS!) or don't use SSL at all that are the problem.