It's useless without revocation
If you cannot securely revoke and replace the certificate, then it has a very short life.
As with "pinning", one should assume that the certificate will be stolen before it becomes obsolete.
If you cannot securely revoke and replace the certificate, then it has a very short life.
As with "pinning", one should assume that the certificate will be stolen before it becomes obsolete.