If you keep your CA secure, no reason that you can't set the expiration of the r... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

zaarn on March 23, 2021 | parent | context | favorite | on: Chrome’s address bar will use https:// by default

If you keep your CA secure, no reason that you can't set the expiration of the root cert to something like 10 years.

tsimionescu on March 24, 2021 [–]

Will browsers accept that?

zaarn on March 24, 2021 | [–]

Browsers accept a root CA with long lifetime. Certs signed by CAs installed by the user or admin also allow long lifetimes (probably will still for a while).

Consider applying for YC's Summer 2025 batch! Applications are open till May 13
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact