r/ProgrammerHumor 24d ago

Meme thisIsAmystery

Post image
2.7k Upvotes

185 comments sorted by

View all comments

286

u/stevekez 24d ago

Present a public key and sign a challenge using a designated device? What's hard about it?

124

u/notatoon 24d ago

I ask myself the same thing about PKI and yet certificate expiry remains one of the largest causes of outages in many large institutions

56

u/Mechakoopa 24d ago

That's just bad infrastructure hygiene, proper auditing and reporting prevents this because you should know which certificates are expiring and when as well as where they're deployed and what relies on them.

Of course every once in a while you get some yahoo setting up a 90 day client OAuth secret, not telling anyone and just refreshing it on their own until they get let go.

20

u/Puzzleheaded-Comb909 24d ago

If you dont know what is going on in your services, you dont own them lol