3 ms·
90 days has always seemed unnecessarily long to me. I have definitely spun up short-lived pages on subdomains that end up getting a cert that outlives the site
by snailmailman 2y ago
90 days has always seemed unnecessarily long to me. I have definitely spun up short-lived pages on subdomains that end up getting a cert that outlives the site itself.
I am concerned at how the cert transparency logs will handle this. That’s going to be a lot of certs getting logged globally if everyone switches to shorter lifetimes.