←back to thread

Let's Encrypt is 10 years old now

(letsencrypt.org)
489 points gslin | 1 comments | 20 Nov 24 06:13 UTC | HN request time: 0.289s | source
Show context
stephenr ◴[20 Nov 24 11:44 UTC] No.42192960[source]▶
I really wish they would finally branch out and offer S/MIME certificates. Good email clients support them out of the box, it's just a PITA to get them if you don't want to order 100 at a time or something equally ridiculous for SME/individuals.
replies(1): >>42193484 #
account42 ◴[20 Nov 24 12:50 UTC] No.42193484[source]▶
Would frequent rotation be reasonable for S/MIME certs though?
replies(2): >>42193824 #>>42194373 #
1. Tepix ◴[20 Nov 24 14:50 UTC] No.42194373[source]▶
Once per year or less. Remember to decrypt messages, you need to keep your old certificates/keys around. You can request a new certificate with the same key but i'm not sure that's a good safety practice.