Hacker News new | ask | show | jobs
by austin-cheney 84 days ago
That could happen either way regardless of expiry. The only reason for an expiration date is to force site owners to cycle their certs at regular intervals to defeat the long time it takes to brute force a successful forgery.