3 ms·
I came to the exact same conclusion as you. I can see this working nicely in relaxed companies that are comfortable waiting for the signed keys to expire (but
by Cpoll 6y ago
I came to the exact same conclusion as you.
I can see this working nicely in relaxed companies that are comfortable waiting for the signed keys to expire (but those companies probably also won't like the inconvenience of expiring keys).
With that said, there is an advantage, in that a revoked key will eventually expire even if the cronjob breaks.