3 ms·
Revocation is a much harder problem than the rest of the world wide PKI put together. With a short enough expiry, you might not even need revocation. (See: DNS
by xorcist 12y ago
Revocation is a much harder problem than the rest of the world wide PKI put together.
With a short enough expiry, you might not even need revocation. (See: DNSSEC.)