Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I use a StartCom certificate, but it has never been used with OpenSSL, so I'm fine.

It costs money to maintain a CRL.

Maybe they could revoke their intermediate certificate and reissue certificates to everyone. That would take time to coordinate, and every month that goes by 1/12 of the bad certs expire anyway.



It might, but certainly not $25 per instance. That feels a lot like gouging.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: