Remix clone Hacker News

Load on the underlying infrastructure is a concern. The signing keys are all in HSMs and don't scale infinitely.

How does cycling out certificates more frequently reduce the load on HSMs?

	▲	timmytokyo 3 days ago \| parent \| next [-]
		It's all relative. A 47-day cycle increases the load, but a 48-hour cycle would increase it substantially more.
	▲	woodruffw 3 days ago \| parent \| prev [-]
		Much of the HSM load within a CA is OCSP signing, not subscriber cert issuance.