5 ms·
Certificate issues don't take that long to resolve.
by mateo411 5y ago
Certificate issues don't take that long to resolve.
- dilyevsky 5y agoThey do if your entire PKI infra is down too
- duskwuff 5y agoA company's internal PKI infrastructure wouldn't be responsible for issuing a public-facing certificate. They literally can't sign those -- a real CA has to do it.
- djbusby 5y agoWait. You can sign your own. They are just not trusted by the wider world. Your devices have an OS provided set of trusted root-CA.
- dilyevsky 5y agoYou are of course correct but usually public and private would reuse some core components of the infra (eg still need to store signed key pair somewhere safe). I’m speculating here but given how long it’s been down some very core and very difficult to recover service must have failed. Security infra tends to have those properties
- charcircuit 5y agoDowntime is expensive. You could just bypass your infra and manually get it working so that you can fix your infra while production is up instead of when it's down.
- crehn 5y agoThat's in fact how most high-impact events should be handled: mitigate the issue with a potentially short-term solution, once things are back up find the root cause, fix the root cause, and perform a thorough analysis of events to ensure it won't happen again.
- dilyevsky 5y agoDepending on the level of automation that may not be possible. That’s like saying if factory line robot fails “you just bypass the line and manually weld those car bodies”