Short-Lived Certificate
A cryptographic credential with an extremely short validity period, automatically issued and frequently rotated by an internal certificate authority. It is used to reduce the risk of key compromise and to ensure that authorization is continuously enforced.
Timeline (last 90 days)
With the spread of certificate transparency, short-lived certificates and automated rotation mechanisms, the certificate ecosystem's ability to respond to CA compromise is gradually improving, but the timeliness of disclosure and the reliability of revocation mechanisms remain areas that need continuous hardening.
Short-lived certificates are a type of cryptographic credential with an extremely short validity period, usually automatically issued and frequently rotated by an internal CA, with common validity periods ranging from a few minutes to a few hours.
All Facts (2)
Short-lived certificates are a type of cryptographic credential with an extremely short validity period, usually automatically issued and frequently rotated by an internal CA, with common validity periods ranging from a few minutes to a few hours.
50%UnverifiedWith the spread of certificate transparency, short-lived certificates and automated rotation mechanisms, the certificate ecosystem's ability to respond to CA compromise is gradually improving, but the timeliness of disclosure and the reliability of revocation mechanisms remain areas that need continuous hardening.
50%