3 ms·
If nothing else, 10 years forces the renewal cert to use a newer, likely less vulnerable encryption algorithm. Imagine your organization was dependent on a CA r
by dessimus 3y ago
If nothing else, 10 years forces the renewal cert to use a newer, likely less vulnerable encryption algorithm. Imagine your organization was dependent on a CA root using a mid-90's algorithm and still had another 70 years to expiration.
- paxys 3y agoThat is something that should be done deliberately as part of the normal product development process, not forced by an arbitrary date that someone set 10 years ago.