Customers on Pro, Business, and Enterprise plans can now enable short-lived SSL certificates. These certificates are valid for just 160 hours and are renewed automatically. You can choose between a preferred mode with automatic fallback or a strict mode that only issues short-lived certificates.
We've updated our Let's Encrypt certificate profile to use a 45-day validity period instead of 90 days. Certificates continue to renew automatically, but this shorter lifecycle aligns with industry trends toward more frequent certificate rotation and helps improve overall TLS security.
Destination monitoring now performs health checks from multiple geographic locations around the world. This helps distinguish between a global outage and a destination that's only unavailable or blocked in a specific country, giving you a more accurate picture of your destination's availability.
We've increased the rate limits for the Check DNS API. This makes it easier to validate larger numbers of domains in bulk and improves support for automated integrations and large-scale migrations.
We've disabled ICMP timestamp requests on our edge network as part of ongoing security hardening. This reduces unnecessary exposure and aligns with best practices for network security.
You can now pause and resume redirects at any time. This makes it easy to temporarily disable a redirect without removing it, and quickly turn it back on when needed.
We've added support for six new Automatic DNS providers:
This expands our automated setup to more users, reducing the need for manual DNS configuration.
The login screen now highlights the last provider you used. This small change makes it quicker and easier to log back in, especially if you regularly use social login.