▲ | arccy 2 days ago | |
actually that's pretty close to where we're going with ever shorter certificate lifetimes... | ||
▲ | layer8 a day ago | parent [-] | |
Only because the browsers are enforcing shorter lifetimes. But you can’t force a premature expiration in case of a server compromise, which is what revocation is for. |