3 ms·
To me it is almost surprising they still work. Every time Let's Encrypt comes up it seems people are in a rush to have security certificates invalidate within w
by josefx 6y ago
To me it is almost surprising they still work. Every time Let's Encrypt comes up it seems people are in a rush to have security certificates invalidate within weeks if not days. A server backed app without updates for two months would turn into a brick.
- dtech 6y agoLE certificate renewal is server-side, client apps don't need updates.
- josefx 6y agoAh, forgot that the trust model is only based on having a valid certificate for the domain, not on the specific certificate. Which is only a problem if someone manages to hijack the domain long enough to get a valid cert. Google is probably less likely to loose control of its main domains than other groups that sometimes just forget to keep track of them.