Both the Chrome and Mozilla root program have signaled the intent to substantially shorten the time we rely on roots in the WebPKI. I believe this to be a good objective but I am struggling to get my head around the viability and implications of the change. In this post, I wanted to capture my … Continue reading WebPKI, TLS, cross-signs, device compatibility, and TLS record size.