3 ms·
Mine are automated. Somehow it reminds me of prayer wheels though...
by nottorp 6mo ago
Mine are automated. Somehow it reminds me of prayer wheels though...
- Dylan16807 6mo agoForcing certificates to expire in less than a year means people don't forget how to update them, which is a big benefit. And once people automate, short-lived certificates are a workable plan B for how to revoke certificates and have the revocation actually work. These are both reasonable goals.
- nottorp 6mo ago> people don't forget how to update them Seriously? I don't even remember how the letsencrypt auto renew service is called. No idea how I did the initial setup either.
- Dylan16807 6mo agoYes, seriously. Forgetting how to set up the automation is a different and significantly smaller issue.