[cabfpub] Allowing SHA-1 OCSP and CRL signatures past 2016

Gervase Markham gerv at mozilla.org
Wed Oct 26 09:41:57 UTC 2016

On 26/10/16 01:26, Kirk Hall via Public wrote:
> I think we can treat this as a Maintenance Guideline to Sec. 7.1.3 of
> the BRs because we need to complete the adoption process by December
> 31. 

As Ryan comments, I think this is unwise. May I propose the alternative
solution of each root program agreeing that this change is reasonable?
You already have the assent of Mozilla, Google and (implicitly) Microsoft.

We can then pass a ballot after the IPR situation is sorted out but have
it apply retrospectively.

Hopefully between those two things, we shouldn't have a significant problem.


More information about the Public mailing list