On Mon, Oct 21, 2013 at 8:57 PM, coderman <[email protected]> wrote: > ... > every time you hand it over, change it. there's risk of an active attack; and some browser *cough* disabled CRL checks "for performance reasons". rock and a hard place... still better than nothing to roll them upon delivery.