#mTLS

Public TLS Certificates Remove Client Authentication: How mTLS Will Be Affected

Public CAs and Chrome will remove the clientAuth extension from TLS certificates by 2027, putting mTLS renewal at risk. This article explains the policy change, typical failure points, and migration paths such as private CA and SPIFFE to help operations teams plan their certificate strategy in advance.