Comment

Comment by jcalvinowens

I completely disagree with you: reusing private keys is an enormous vulnerability. It's really important to rotate them.

It's very easy to avoid the pitfall you mentioned by having multiple valid certs with different expiry dates. You can easily use multiple CAs.

Done your way, a single leaked private key means your entire site is compromised indefinitely. That's unacceptable to me.

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton