Hacker News Reader

Comment by rafaelturk | Hacker News Reader

TL:DR: If your webste clientes use Android 7.0 or earlier (released 2016), you may need to take action to ensure you can still access websites secured by Let’s Encrypt certificates. By Thursday, June 6th, 2024.

View on HN

There's also the possibility that Chrome decides to bundle this CA like Firefox mobile does, which would mean the majority of users won't have a problem. From 5.0 the builtin webview is updatable too - I think it uses Chrome's engine.

That leaves other browser's such as Samsung's one which probably has the most usage, no idea if they bundle root CAs or not.

I don't know about you, but looks like this will cause some impact.

By the article's infographic, it's 4.6% of Android users. Anyone not using FireFox Mobile on Android 7.0 or earlier. Some, but not major.

3 billion seems like decent number to use for how many Android users there are [1]. 4.5% of 3 billion is 135 million or about 13x more than Google Domains [2] so I guess not major indeed.

[1]: https://www.google.com/search?q=number+of+android+users

[2]: https://www.theverge.com/2023/6/16/23763340/google-domains-s...

6.1%, those using 7.0 and older will be affected. But that number will have fallen a bit by the time the certs actually expire in a year.

I wonder how skewed to poorer countries that is? Also I imagine some skew towards smart tvs (since they outlive older phones, you could easily have a 2013 smart tv still working, I had a 2009 dumb TV until recently and sold it on).

Reply on news.ycombinator.com