Are there any cert solutions that dont involve having to maintain a revocation l... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

leetrout on March 24, 2023 | parent | context | favorite | on: We updated our RSA SSH host key

Are there any cert solutions that dont involve having to maintain a revocation list? I only used certs with openvpn years ago and the CRL was a potential footgun.

goalieca on March 24, 2023 [–]

This is one reason people are issuing certs with 2 week expiry.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact