Why shorten certificate to 5. Force automation

Why shorten certificate to 5. Force automation An architecture diagram generated by Archify. Why shorten certificate · life? · Architecture component Why shorten certificate life? 1. Bigger window · for a stolen key to be misused · Architecture component 1. Bigger window for a stolen key to be misused 2. Stale data · the domain owner, company, or identity info … · Architecture component 2. Stale data the domain owner, company, or identity info … 3. Stale crypto · outdated algorithms, weak keys, old librarie… · Architecture component 3. Stale crypto outdated algorithms, weak keys, old librarie… 4. Domains change · hands a cert issued to the old owner should … · Architecture component 4. Domains change hands a cert issued to the old owner should … 5. Force automation · no human can renew 50k certs by hand every m… · Architecture component 5. Force automation no human can renew 50k certs by hand every m… Legend Backend Security

Chain

  • • 6 steps, one path
  • • Edge labels omitted for clarity