Hacker News new | ask | show | jobs
by vbezhenar 1764 days ago
Encryption is performed with private key, not with certificate. If you can issue new certificate for the same private key, it should be able to decrypt old stuff.

Rotating keys might be a good security practice, though. But not necessary.