Comment Comment by jcalvinowens I completely disagree with you: reusing private keys is an enormous vulnerability. It's really important to rotate them.It's very easy to avoid the pitfall you mentioned by having multiple valid certs with different expiry dates. You can easily use multiple CAs.Done your way, a single leaked private key means your entire site is compromised indefinitely. That's unacceptable to me. parent jcalvinowens 2 years ago
It's very easy to avoid the pitfall you mentioned by having multiple valid certs with different expiry dates. You can easily use multiple CAs.
Done your way, a single leaked private key means your entire site is compromised indefinitely. That's unacceptable to me.