2 ms·
> Again, there's nothing in the Wikipedia link which specifies that site certificates MUST exist for a specific duration. I never said anything like that. Web
by austincheney 7y ago
> Again, there's nothing in the Wikipedia link which specifies that site certificates MUST exist for a specific duration.
I never said anything like that. Web certificates are around for as long as both the website and CA are willing to service them.
- dredmorbius 7y ago"Websites require long term certificate retention and every year or two those certificates are replaced just like email PKI keys are" https://news.ycombinator.com/item?id=22893385 https://news.ycombinator.com/item?id=22893385
- austincheney 7y agoCAs generally issue certificates to websites for 1 or 2 years, but there isn't a fixed duration imposed by cryptography standards. Sometimes the certificates are rejected prematurely due to compromise, and there is a process for that called key revocation. I am thinking you reading something more into what I wrote than the words on the screen.
- dredmorbius 7y agothere isn't a fixed duration imposed by cryptography standards Which was my point in the first place. A distinct difference from the case of data-at-rest. I am thinking you reading something more into what I wrote than the words on the screen. I disagree, but suggest the same for yourself.