News for hackers. Stuff that matters.
Re:What You Need to Know about HTTP Public Key Pinning (HPKP) by jlgaddis on Sunday February 07, 2016 @02:40PM (#11054416)
Yes. You want everything to be completely separate. In a way, It's kinda like falling over to a failover machine -- different storage, different network connection, etc.

If your "primary" certificate or any of the others in the chain is compromised -- for whatever reason -- you want the ability to immediately switch over to your "backup" certificate without problems or affecting your users.

There are no comments on this comment yet.