News for hackers. Stuff that matters.

A comment on Let's Encrypt is Trusted. Parent comment

Re:Let's Encrypt is Trusted by j4cob on Tuesday October 20, 2015 @12:56AM (#10417498)
This was a performance decision. Cross-signing the root instead of the intermediate would mean that web servers would have to include both the root and the intermediate in the chain they serve, rather than just the intermediate. That would add a full packet to each handshake.
[ Parent | on HN ]
Re:Let's Encrypt is Trusted by Natanael_L on Tuesday October 20, 2015 @04:53AM (#10418120)
Why are there multiple intermediate certs? I don't know the details of the standard procedure.
[ Parent | on HN ]
Re:Let's Encrypt is Trusted by vog on Tuesday October 20, 2015 @05:31AM (#10418229)
In case the main intermediate cert has been compromised and must be revoked, the alternative intermediate cert is already signed and can be used immediately for desaster recovery.
[ Parent | on HN ]