Remix.run Logo
Dylan16807 2 hours ago

> the ENTIRE reason the short lifetime is used for the LE certs is that they haven't figured out how to make revoking work at scale.

And 200 is not "at scale". The list of difficulties in revoking roots is a very different list from the problem you're citing.

> any and every embedded device

Yes it's flawed but it's so much better than the previous nothing we had for detecting one of the too-many CAs going rogue.