[sneak]

With an online certificate issuance service like the one they describe, certificate expiration times can probably be in the 1-24 hour range, reducing the importance of revocation.