Comment by mcpherrinm

This is a two-sided solution, and one significant reason for shorter certificate lifetimes helps make revocation work better.