Remix.run Logo
saurik 2 days ago

How is this actually better (or conceptually even different) than just having the issuer's servers issue new certificates that only last 24 hours?

Ayesh 2 days ago | parent [-]

It's not better.

Short lived certificates are definitely the better way forward.

24 hour certificates will add a significantly more load on CAs, a lot more than maintaining an OCSP responder.