On 22/10/12 23:15, Paul Wouters wrote:
Maintaining TLS certificates actually becomes _easier_, because people don't have to frantically read the openssl man page to generate a new certificate when the old one suddenly expired without anyone noticing before the complains hit the help desk.
They have to read other documentation about how to update their DNS instead...
On the above point, incidentally, for those who are not capable of putting an entry in their calendars for a year or two years in advance, then the following Firefox addon (rough and ready, but functional) might be useful:
https://addons.mozilla.org/en-US/firefox/addon/expiry-canary/ Gerv _______________________________________________ therightkey mailing list [email protected] https://www.ietf.org/mailman/listinfo/therightkey
