Using short-lived certificates to protect TLS secrets | Hacker News Reader