💾 Archived View for bbs.geminispace.org › u › skyjake › 1135 captured on 2024-03-21 at 21:43:22. Gemini links have been rewritten to link to archived content
⬅️ Previous capture (2024-02-05)
-=-=-=-=-=-=-
Re: "Expiration of self-signed certificates Does it make sense..."
@mbays
— /s/Lagrange-Issues/issues/22
2023-05-27 · 10 months ago
Expiration of self-signed certificates Does it make sense to use Not After on self-signed gemini server and client certificates, so that they expire after some time? I long ago came to the conclusion that it doesn't make sense, but it still seems to be standard practice, so I'm worried that I may have missed something. Have I? Certainly you shouldn't expect a self-signed certificate to be usable forever -- the private key might be compromised one day, and anyway the underlying encryption will