Comment by datadrivenangel | Hacker News Reader

Top New Best Ask Show Jobs

Comment by datadrivenangel | Hacker News Reader

Parent Full thread

datadrivenangel·

Does having to refresh the key every 6 weeks instead of every year or whatever actually make a meaningful difference security-wise?

At the minimum you’ll remember how to do it if you have to do it every six weeks.

If the key becomes compromised, rotating the key sooner means you potentially limit the damage from unauthorised access.

Yes? That's a huge difference.

Reply on news.ycombinator.com