3 ms·
Sounds to me that a "soft expire" is just shifting the problem slightly. If things continue to work, then people will ignore the soft expiration until it become
by ndsipa_pomu 4y ago
Sounds to me that a "soft expire" is just shifting the problem slightly. If things continue to work, then people will ignore the soft expiration until it becomes a hard expiration. If things stop working, then there's no point in having the soft expiration.
I'm sold on the LetsEncrypt philosophy of having short expiration dates so that organisations are more or less forced to properly automate their renewal processes.