Hacker News Reader

As far as I know 30 minutes validity is no one's goal, even long term.

The most aggressive plans (not Let's Encrypt's specifically) target 7 day validities.

And at how many days or minutes does it turn from security into security theater?

If we follow this line of thought it would be more secure to only serve sites to consumers through a few "trusted" third parties right?

> If we follow this line of thought it would be more secure to only serve sites to consumers through a few "trusted" third parties right?

No.