Hacker News new | ask | show | jobs
by nuxi7 4098 days ago
Totally This ^

This is a key you get re-signed every 1-3 years. You don't need it to last 10 years, you need it to last maybe a year longer than your SSL cert is actually good for. (Assuming your site is setup to have all the browsers do PFS)