4 ms·
Load on the underlying infrastructure is a concern. The signing keys are all in HSMs and don't scale infinitely.
by fs111 1y ago
Load on the underlying infrastructure is a concern. The signing keys are all in HSMs and don't scale infinitely.
- bob1029 1y agoHow does cycling out certificates more frequently reduce the load on HSMs?
- timmytokyo 1y agoIt's all relative. A 47-day cycle increases the load, but a 48-hour cycle would increase it substantially more.
- woodruffw 1y agoMuch of the HSM load within a CA is OCSP signing, not subscriber cert issuance.