3 ms·

revoking certs does not work. it is so bad that the end result is that by 2029 certificates will not be allowed to be valid longer than 47 days: https://news.yc

by em-bee 1y ago

revoking certs does not work. it is so bad that the end result is that by 2029 certificates will not be allowed to be valid longer than 47 days: https://news.ycombinator.com/item?id=43693900 https://news.ycombinator.com/item?id=43693900

layer8 1y ago
TLS server certificates, that is. It’s perfectly fine for other uses of certificates.
- em-bee 1y ago
  true, but i would guess that revoking certificates doesn't work in general, so this would apply to any situation where revoking is necessary.
  - layer8 1y ago
    That guess is incorrect. Revocations are routine in PKI-based electronic signatures and authentication, and do work there.