<html><body><span style="font-family:Verdana; color:#000000; font-size:10pt;"><div><span style="font-family:Verdana; color:#000000; font-size:10pt;"><div><span style="font-size: 10pt;">Appendix A of the BRs states that subscriber certificates with a validity period ending after Dec 31, 2013 must have a key size of at least 2048 bits. Taken literally, this means that no CA is in compliance with the BRs until all certs that fail to meet this requirement have been revoked. However, I've noticed that a number of CAs have responded to Mozilla's Jan 2013 Communication by stating that all of their 1024 bit subscriber certificates will be revoked by Dec 31, 2013. Won't that then cause those CAs to fail BR audits this year unless we update the BRs?</span></div><div><br></div><div>I'm not yet aware of any known practical brute force attack on 1024 bit RSA keys. On the other hand, it is clear that there will be a major impact on existing SSL sites as CAs work to rekey 10's of thousands of certificates this year. I'd like to propose that we extend the deadline in the BRs for revoking existing certs with 1024 bit keys pending further evidence of a practical vulnerability. Do others support this change?</div><div><br></div><div>Thanks,</div><div><br></div><div>Wayne</div></span></div> </span></body></html>