4 ms·
Forcing certificates to expire in less than a year means people don't forget how to update them, which is a big benefit. And once people automate, short-lived
by Dylan16807 6mo ago
Forcing certificates to expire in less than a year means people don't forget how to update them, which is a big benefit.
And once people automate, short-lived certificates are a workable plan B for how to revoke certificates and have the revocation actually work.
These are both reasonable goals.
- nottorp 6mo ago> people don't forget how to update them Seriously? I don't even remember how the letsencrypt auto renew service is called. No idea how I did the initial setup either.
- Dylan16807 6mo agoYes, seriously. Forgetting how to set up the automation is a different and significantly smaller issue.