<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
On 02/01/2013 10:16 PM, From Ryan Sleevi:
<blockquote
cite="mid:CACvaWvb0Y91tVwiJgqgW0Z_bkgY3CkGTqvT67gX+Et5_GcOgEA@mail.gmail.com"
type="cite">
<pre wrap="">I would also note that it would seem to favour the incumbent CAs whose
practices may have been more lax, but more marketable, at the expense
of newer CAs entering the field and needing to conform to the BRs.</pre>
</blockquote>
<br>
Or those that always had a higher standard and/or policy
requirements.<br>
<br>
<blockquote
cite="mid:CACvaWvb0Y91tVwiJgqgW0Z_bkgY3CkGTqvT67gX+Et5_GcOgEA@mail.gmail.com"
type="cite">
<pre wrap="">I realize that, conversely, requiring compliance may come with a cost,
but I think the whole argument is that the BRs do raise the bar on
security, and that the cost is justified compared to the risks to
users and the responsibilities of operating in the public trust.
</pre>
</blockquote>
<br>
I think that it should be very clear that NEW (*) certificates must
confirm to the BR, resulting that nobody should get 1K certificates
today anymore (excluding certificates that are valid for a shorter
period than one year).<br>
<br>
Of course it would be great if previously issued certificate would
be replaced and also shortened in their lifetime to the maximum
allowed validity period. It seems to me that such effort could be
done for most within the course of almost one year.<br>
<br>
(*) Of course it would be easy to issue a certificate today with a
validity period starting before summer 2012, but lets assume nobody
does that.<br>
<br>
<br>
<div class="moz-signature">
<table border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td colspan="2">Regards </td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
<tr>
<td>Signer: </td>
<td>Eddy Nigg, COO/CTO</td>
</tr>
<tr>
<td> </td>
<td><a href="http://www.startcom.org">StartCom Ltd.</a></td>
</tr>
<tr>
<td>XMPP: </td>
<td><a href="xmpp:startcom@startcom.org">startcom@startcom.org</a></td>
</tr>
<tr>
<td>Blog: </td>
<td><a href="http://blog.startcom.org">Join the Revolution!</a></td>
</tr>
<tr>
<td>Twitter: </td>
<td><a href="http://twitter.com/eddy_nigg">Follow Me</a></td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
</tbody>
</table>
</div>
<br>
</body>
</html>