3 ms·
You would think with the frequency this happens some adults in the room would have introduced a "soft expire" mode by now, where it just loudly complains instea
by stefan_ 4y ago
You would think with the frequency this happens some adults in the room would have introduced a "soft expire" mode by now, where it just loudly complains instead of binary refusing to work, particularly given how marginal a "security feature" expiry is anyway.
- ndsipa_pomu 4y agoSounds to me that a "soft expire" is just shifting the problem slightly. If things continue to work, then people will ignore the soft expiration until it becomes a hard expiration. If things stop working, then there's no point in having the soft expiration. I'm sold on the LetsEncrypt philosophy of having short expiration dates so that organisations are more or less forced to properly automate their renewal processes.