short lifetimes

• avoid crl at all costs

• even at the cost of long-term signatures and encryption

• authentication only

• mit allows up to a year

• over 50,000 served! (in the first year alone)

Previous slide

Next slide

Back to first slide

View graphic version