Small correction, see edited quote 

Den 15 feb. 2018 23:44 skrev "Natanael" <natanael.l@gmail.com>:
Allowing expiration retains insecurity, while *NOT* allowing expiration makes it a trivial DoS target.