4 ms·
It's not your risk to decide on. You will not always own that domain name, and allowing you to still have a valid cert for it afterwards is silly.
by MrStonedOne 7y ago
It's not your risk to decide on. You will not always own that domain name, and allowing you to still have a valid cert for it afterwards is silly.
- pmontra 7y agoActually it could be not negligence but a way to perform an attack. Register a domain, get a certificate lasting forever, let the domain expire and somebody buy it. Then somehow redirect all or part of the traffic to that domain to your own server with a valid certificate. Chances are that few people will notice something has changed in the details of the certificate. However you'll have left traces all over the place: credit cards, phone numbers, etc.