Most certs expire within a year, right? So worst-case, it's a temporary trust is... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		sliverstorm on April 9, 2014 \| parent \| context \| favorite \| on: Most StartSSL certs will stay compromised Most certs expire within a year, right? So worst-case, it's a temporary trust issue.

steveklabnik on April 9, 2014 [–]

Temporary for now. I don't want a CA who has a "you can't trust them for up to a year after a vulnerability" to be in the default trusted list.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact