2 ms·
> This makes no sense. To make it clear what I mean, imagine this hypothetical conversation: Alegeus: "We need a certificate with a longer life than the 3 mon
by michaelt 2y ago
> This makes no sense.
To make it clear what I mean, imagine this hypothetical conversation:
Alegeus: "We need a certificate with a longer life than the 3 months we can get from Lets Encrypt"
DigiCert: "That is our core business. We will sell you a 12 month certificate. It may be revoked early, if it was mis-issued."
Alegeus: "I particularly need a 12 month certificate, as I mentioned. Is revocation likely? Do you often mis-issue certificates? To your knowledge, are you currently mis-issuing certificates?"
CA/Browser Forum: "Yeah DigiCert, is it likely? Are you currently mis-issuing certificates?"
DigiCert: "We have a number of organisational and technical controls in place to prevent certificates being mis-issued. We do not have a history of mis-issuing certificates, and to our knowledge we are not currently mis-issuing certificates. Our controls have passed third-party audits."
Alegeus: "OK, so to the best of your knowledge as certificate industry experts, this 12 month cert you're selling me will be valid for 12 months?"
DigiCert: "To the best of our knowledge, yes."
- bastawhiz 2y agoTo make it clear what I mean, imagine this hypothetical conversation: Supermarket: "We need a candy bar they we can sell to our customers" Hershey: "That is our core business. We will sell you candy. It may be recalled, if we discover problems." Supermarket: "Is a recall likely? Do you often recall candy? To your knowledge, are you currently selling bad candy?" FDA: "Yeah Hershey, is it likely? Are you currently making toxic candy?" Hershey: "We have a number of organisational and technical controls in place to prevent contaminated candy. We do not have a history of contamination, and to our knowledge we are not currently contaminating candy. Our controls have passed third-party audits." Supermarket: "OK, so to the best of your knowledge as candy experts, this candy you're selling me will be good to sell?" Hershey: "To the best of our knowledge, yes." If someone warns you about a possible eventuality, you simply don't pretend that the eventuality is impossible. That's why they warned you. Obviously nobody wants that. It's just plain ignorant to have a shocked Pikachu face when the thing they warned you might happen in extenuating circumstances happens.