This letter was originally published in our 2024 Annual Report.
The past year at ISRG has been a great one and I couldn’t be more proud of our staff, community, funders, and other partners that made it happen. Let’s Encrypt continues to thrive, serving more websites around the world than ever before with excellent security and stability. Our understanding of what it will take to make more privacy-preserving metrics more mainstream via our Divvi Up project is evolving in important ways.
If they got it with your knowledge, can’t you just revoke the old one?
Yeah, but unfortunately cert revocation isn’t that great in practice. Lots of devices and services don’t even check the revocation lists on every connection.
If they get it without your knowledge, what are the odds they can get the new one too?
If they got it with your knowledge, can’t you just revoke the old one?
https://en.m.wikipedia.org/wiki/Swiss_cheese_model
I’ve been using the Swiss Cheese Model for my sandwiches and they’ve been a disaster.
You have to scramble the slices, otherwise the holes all line up and your mayonnaise falls out.
Yeah, but unfortunately cert revocation isn’t that great in practice. Lots of devices and services don’t even check the revocation lists on every connection.
6 days to do what you want to do to the page and its visitors. I guess that’s good?