Hacker News new | ask | show | jobs
by bob1029 432 days ago
How does cycling out certificates more frequently reduce the load on HSMs?
2 comments
timmytokyo 432 days ago
It's all relative. A 47-day cycle increases the load, but a 48-hour cycle would increase it substantially more.
link
woodruffw 432 days ago
Much of the HSM load within a CA is OCSP signing, not subscriber cert issuance.
link