💾 Archived View for bbs.geminispace.org › u › skyjake › 1135 captured on 2023-12-28 at 18:23:40. Gemini links have been rewritten to link to archived content
⬅️ Previous capture (2023-11-14)
-=-=-=-=-=-=-
Re: "Expiration of self-signed certificates Does it make sense..."
@mbays
— /s/Lagrange-Issues/issues/22
May 27 · 7 months ago
Expiration of self-signed certificates Does it make sense to use Not After on self-signed gemini server and client certificates, so that they expire after some time? I long ago came to the conclusion that it doesn't make sense, but it still seems to be standard practice, so I'm worried that I may have missed something. Have I? Certainly you shouldn't expect a self-signed certificate to be usable forever -- the private key might be compromised one day, and anyway the underlying encryption will