[zeroxfe]

Expiries are a defence-in-depth that exist primarily for crypt hygiene, for example to protect from compromised keys. If the private key material is well protected, the risk is very low.

However, an org (particularaly a .mil) not renewing its TLS certs screams of extreme incompetence (which is exactly what expiries are meant to protect you from.)

[jp191919]

>screams of extreme incompetence

Not unheard of with the military

[cozzyd]

Precision lethality, not certificate renewality.

[hoherd]

Let's not kid ourselves, the lethality isn't even that precise.

[crote]

It is quite precise, it just isn't accurate.

On the one hand, they can do a perfect triple-tap. On the other hand, the perfect triple-tap hit a girls' school rather than a military base...

[rectang]

"Why not neither?"