On Wed, Mar 11, 2020 at 09:10:56AM +0100, Lukas Tribus wrote: > As for automatic key rotation features, I'm not aware of anyone doing > this by default, expect some niche projects (Caddy I believe does > this). Not nginx, not Apache. These are features that someone has to > actually develop.
And it will not be done in multi-node environments without a mechanism to synchronize the keys between nodes. We initially expected to do that in the future, but with TLS1.3 having killed tickets, it would be pointless. Willy
