←back to thread

Six day and IP address certificate options in 2025

(letsencrypt.org)
197 points SGran | 1 comments | 16 Jan 25 15:36 UTC | HN request time: 0.289s | source
Show context
Eikon ◴[16 Jan 25 19:40 UTC] No.42729893[source]▶
This will get interesting for many CT transparency monitors which for many are already seeing scalability issues.

I am operating https://www.merklemap.com/ and the current scale is already impressive.

replies(4): >>42730632 #>>42731359 #>>42731797 #>>42732171 #
1. o11c ◴[16 Jan 25 22:38 UTC] No.42731797[source]▶
Hmm, I wonder if it's possible to do dedicated intermediate certificates that promise to only sign short-lived certificates for a single site? That way the CT-log could be taught to only keep the intermediate?