Re: [Full-disclosure] Expired certificate

[Dimitry Andric <dimitry@xxxxxxxxxx>]

On 2010-07-16 19:15, Larry Seltzer wrote:
> Certificates have expiration dates so that the verification that happens
> at the time the cert is acquired can have some "freshness."

That is definitely not the only reason.  The longer a certificate (or
actually, any 'secret key') is being used, the larger the probability
that it will be compromised, either by an opponent brute-forcing it, or
by good ole' human error.

Another reason is, of course, to guarantee steady income for the
certificate vendors... ;)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/