3 ms·
In a world where you can simply compromise a cert of your choice we can get rid of the TLS theatre altogether. No, the world we have is one where these expiry
by stefan_ 6y ago
In a world where you can simply compromise a cert of your choice we can get rid of the TLS theatre altogether.
No, the world we have is one where these expiry mishaps happen all the time, and everyone would be better served if certs had a warning expiration date in addition to the red alert one. It's the old "don't delete a customer the second they are late on a single payment" thing that everyone long recognizes as good practice.
- bawolff 6y agoA difference is non expired compromised certificates are usually revoked. Expired compromised certificates are generally not. I think whole thing could be solved by having soft and hard expiry dates. It is an extensible format after all.