Hacker News Reader

A 3-year wildcard cert from rapidSSL is only 200 bucks when purchased through a reseller. If going in that direction saves you even a couple hours over the course of three years, it's more than paid for itself.

View on HN

Great.

Now what happens when you have to do a rotation because of another attack that makes it possible to leak private keys?

You generate a new CSR + private key and reissue the cert through the vendor. All the ones I've purchased allow reissuing as often as you like. The expiration date never changes obviously, but reissuing is a common practice.

I was referring to the time spent doing something like that and the delay in response because of a lack of automation around rotating certs.

200 is pretty steep for a cert IMO

Reply on news.ycombinator.com