3 ms·
The better solution is to do what vault does. Use only ephemeral certificates for servers and clients. It wouldn't be too hard to change them every week or so u
by goku12 3y ago
The better solution is to do what vault does. Use only ephemeral certificates for servers and clients. It wouldn't be too hard to change them every week or so using the ACME protocol.
- remram 3y agoACME has a revocation workflow. Having my lost certificates be valid for a week is still unacceptable.