logoalt Hacker News

nickftoday at 6:30 PM0 repliesview on HN

A certificate is a binding of a cryptographic key, along with an attestation of control of a DNS record(s) at a point in time. DNS changes frequently. The attestation needs to be refreshed much more frequently to ensure accuracy.