3 ms·
I have a nasty habit of requesting revocation of such compromised keys whenever I find them. CAs are required to revoke within 24 hours, I think, though unfortu
by tgsovlerkhgsel 6y ago
I have a nasty habit of requesting revocation of such compromised keys whenever I find them. CAs are required to revoke within 24 hours, I think, though unfortunately revocation is surprisingly ineffective.
- AdamJacobMuller 6y agoDo you actually find those often? I've actually never seen one. I will admit I've also never specifically looked very hard.
- tgsovlerkhgsel 6y agoI'd say one every couple of years. https://letsencrypt.org/docs/certificates-for-localhost/ https://letsencrypt.org/docs/certificates-for-localhost/ has great documentation on that topic, including more examples.