[Ayesh]

It's not better.

Short lived certificates are definitely the better way forward.

24 hour certificates will add a significantly more load on CAs, a lot more than maintaining an OCSP responder.

[saurik]

But, signing the updated expiration date seems like exactly the same amount of signing as just signing the entire certificate?