Hi Rich,

> "I want to get my content off a CDN" is a valid use-case. 
Perhaps, however, trying to use short-lived certificates for that is not.

Changing your CDN is a CDN problem, not a certificate problem.  What happens to 
your content *after* you've changed your CDN is *not* a problem you can fix 
with certificates.

Kind Regards,
Chris Drake


Saturday, July 23, 2016, 8:12:18 PM, you wrote:

SR> Browsers check validity time.  They do not look for CRL's; they sometimes 
look for OCSP status.

SR> "I want to get my content off a CDN" is a valid use-case. 
SR> Sometimes it's not a CDN breach, sometimes it's a business
SR> decision.  I don't want to erase my content, I want to rotate it
SR> across multiple CDN's as my needs change.


_______________________________________________
Acme mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/acme

Reply via email to