Re:Let's Encrypt: Active Incident, DNS errors causing servic...
by geofft on Friday April 15, 2016 @01:37PM
(#11506182)
That wouldn't be such a problem given that most SSL stacks (correctly, IMO) ignore revocation checking... except that you can't get a new cert without revoking the old one. It would otherwise be reasonable to determine you don't care about getting it revoked (and therefore don't want to fund the revocation infrastructure, like a highly-available OCSP responder) but you just want a new cert.
[ Parent
| on HN ]
There are no comments on this comment yet.