3 ms·
Yeah, I don't understand why 10 years would be preferable to 100 years. 10 years indicates that the person thinks "not my problem". Be kind, make it 100 in that
by mongol 3y ago
Yeah, I don't understand why 10 years would be preferable to 100 years. 10 years indicates that the person thinks "not my problem". Be kind, make it 100 in that case.
- dessimus 3y agoIf nothing else, 10 years forces the renewal cert to use a newer, likely less vulnerable encryption algorithm. Imagine your organization was dependent on a CA root using a mid-90's algorithm and still had another 70 years to expiration.
- paxys 3y agoThat is something that should be done deliberately as part of the normal product development process, not forced by an arbitrary date that someone set 10 years ago.
- deleted 3y ago[deleted]
- nonameiguess 3y agoThere probably isn't an actual reason other than "nice round number," but this could conceivably be something like a typical time to expect 50% of a corporate organization to have turned over. 100 years would be guaranteed 100% turnover, including ownership, and likely 99% of organizations don't even exist that long. At that point, it may as well just never automatically expire.