Re:Another free CA as an alternative to Let's Encrypt
by gloriousternary on Friday August 20, 2021 @09:38AM
(#28245782)
From my understanding S/MIME is pretty much enterprise PGP, so if you don't have your old certificates you can't access old emails that were encrypted using them
[ Parent
| on HN ]
Re:Another free CA as an alternative to Let's Encrypt
by vbezhenar on Friday August 20, 2021 @01:24PM
(#28248750)
Encryption is performed with private key, not with certificate. If you can issue new certificate for the same private key, it should be able to decrypt old stuff.
Rotating keys might be a good security practice, though. But not necessary.