News for hackers. Stuff that matters.

A comment on You don't want long-lived keys. Parent comment

Re:You don't want long-lived keys by datadrivenangel on Saturday April 25, 2026 @01:03AM (#47898785)
Does having to refresh the key every 6 weeks instead of every year or whatever actually make a meaningful difference security-wise?
[ Parent | on HN ]
Re:You don't want long-lived keys by plorkyeran on Saturday April 25, 2026 @02:03AM (#47899080)
At the minimum you’ll remember how to do it if you have to do it every six weeks.
[ Parent | on HN ]
Re:You don't want long-lived keys by tptacek on Saturday April 25, 2026 @01:46AM (#47899017)
Yes? That's a huge difference.
[ Parent | on HN ]
Re:You don't want long-lived keys by 1024kb on Saturday April 25, 2026 @04:48AM (#47899822)
If the key becomes compromised, rotating the key sooner means you potentially limit the damage from unauthorised access.
[ Parent | on HN ]