[cabfpub] Draft Ballot 185 (2) - Limiting the Lifetime of Certificates

Ryan Sleevi sleevi at google.com
Wed Feb 8 21:22:50 UTC 2017


On Wed, Feb 8, 2017 at 12:51 PM, Peter Bowen <pzb at amzn.com> wrote:
>
> On Feb 8, 2017, at 12:24 PM, Ryan Sleevi via Public <public at cabforum.org>
> wrote:
>
> We've seen analysis about what is the 'floor' for the ecosystem to affect
> change ( https://cabforum.org/pipermail/public/2017-February/009483.html
> ), but luckily, this ballot focuses on new certificates. By targeting 1 May
> 2017, any potential impact on subscribers does not manifest until June
> 2018.
>
>
> How this this follow?  A customer who has a certificate expiring May 2,
> 2017 can currently get a 39 month certificate.  However with this ballot
> they will have to get 13 month certificate.  The impact seems to be much
> sooner than you state.
>

So a customer who gets a certificate May 2, 2017 will get a 13 month
certificate. However, the 'impact' of that - ostensibly, CAs have reported
that it comes with replacing the certificate - doesn't manifest until June
4, 2018, when they would (now) need to replace their certificate.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20170208/64f76260/attachment-0003.html>


More information about the Public mailing list