4 ms·

I'm sure those six-day lifetime certificates will work out real nice.

• ocdtrekkie 1y ago
  I think I am going to become a fan of shorter certificate lifetimes because as soon as the chuckleheads in the CAB truly break the Internet on the level they are pushing for, the sooner we get to discard the entire PKI dumpster fire.
  • NooneAtAll3 1y ago
    what's the alternative to PKI?
    • dylan604 1y ago
      no alternative. just eliminate the thing not liked. it's called being DOGEd
    • greyface- 1y ago
      https://en.wikipedia.org/wiki/Decentralized_identifier https://en.wikipedia.org/wiki/Decentralized_identifier
      • jtchang 1y ago
        So basically you trust something because you have a long chain of assurances that you trusted it before? Kinda like certificate pinning.
    • haiku2077 1y ago
      Certainly something a hell of a lot simpler then x509 - and without assumptions from the 1990s hardcoded into it
      • cpach 1y ago
        Is it really X.509 that is the big “problem”? If so, I fail to see how.