Equivalently, it also maximizes the number of sites impacted when a CA is compro... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		hedora 9 months ago \| parent \| context \| favorite \| on: TLS certificate lifetimes will officially reduce t... Equivalently, it also maximizes the number of sites impacted when a CA is compromised. It also lowers the amount of time it’d take for a top-down change to compromise all outstanding certificates. (Which would seen paranoid if this wasn’t 2025.)

lokar 9 months ago [–]

Mostly this. Today of a big CA is caught breaking the rules, actually enforcing repairs (eg prompt revocation ) is a hard pill to swallow.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact