Re:Let's Encrypt: How It Works
by giovannibajo1 on Friday November 21, 2014 @03:38PM
(#8643261)
Why caring at all about OCSP/CRL revocations that don't work anyway (https://www.imperialviolet.org/2014/04/29/revocationagain.ht...)? If you have an agent running on the webserver, you're 99% close to simply use short-lived certs. Just issue 1-week certs and be done with.
[ Parent
| on HN ]
Re:Let's Encrypt: How It Works
by bifurcation on Friday November 21, 2014 @03:43PM
(#8643280)
Getting to short-lived certificates is a goal, but the reality for now is that OCSP and CRLs are what implementations require, and what the CABF Baseline Requirements require. So we'll need to start with those.