9 ms·
Of course they do, they have to. But it's okay for things that are sent to you over the network to expire. It's not okay for things built into your potentially
by grishka 8mo ago
Of course they do, they have to. But it's okay for things that are sent to you over the network to expire. It's not okay for things built into your potentially abandoned OS to expire.
- snowwrestler 8mo ago> Of course they do, they have to. Why do they have to? (This will also tell you why certs in your OS need to expire.)
- grishka 8mo agoBecause domains change owners. https://news.ycombinator.com/item?id=47074127 https://news.ycombinator.com/item?id=47074127
- snowwrestler 8mo agoMore specifically: because they cannot be revoked, they need to expire. Same with root certs.