Re: Expired certificates

Can anyone give me a reason why an unused but >expired certificate could cause a security ...

Assuming you are referring to SSL certs here.

AFAIK there is no risk involved if its unused,but if it being actively used by average users.

Then Users will be confronted with expired SSL cert warnings on a regular basis will become conditioned to ignore them and they will/can ignore any other "real" warnings like MITM messages as well.

so its a good idea to renew expired SSL certs if its a production server

-------------------------------------------------------------------------
This List Sponsored by: Webroot

Don't leave your confidential company and customer records un-protected.
Try Webroot's Spy Sweeper Enterprise(TM) for 30 days for FREE with no
obligation. See why so many companies trust Spy Sweeper Enterprise to
eradicate spyware from their networks.
FREE 30-Day Trial of Spy Sweeper Enterprise

http://www.webroot.com/forms/enterprise_lead.php
--------------------------------------------------------------------------