3 ms·
Not sure why this is getting downvoted. I upvoted it because I'm not sure people understand the complexity of internal operations and all of the uses of certs a
by m3047 4y ago
Not sure why this is getting downvoted. I upvoted it because I'm not sure people understand the complexity of internal operations and all of the uses of certs and opportunities for things to go wrong. But 20 years? Geesh. Couldn't you have just advocated for staggered expirations?
- ratg13 4y agoThe CA that issues the 20 year certs stays offline, so the only way to get the private key is to hack each machine. If the machine is compromised to the point where you can extract the key, the cert does very little since you already own the endpoint.