<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
On 06/23/2013 10:32 PM, From Rick Andrews:
<blockquote
cite="mid:544B0DD62A64C1448B2DA253C011414607B03DC21D@TUS1XCHEVSPIN33.SYMC.SYMANTEC.COM"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style><font
face="Calibri, sans-serif" size="2">
<ol style="margin-top: 0pt; margin-bottom: 0pt; margin-left:
72pt; " type="a">
<li>Mozilla’s policy seems to be similar – it says that such
certs must expire by January 1, 2014, but it does not
mandate that CAs revoke any such certs that would live
beyond that
date.</li>
</ol>
</font></blockquote>
<br>
Something doesn't make sense here....if the certificates MUST expire
by a certain date, there can't be any certificates with that
requirement after that. I assume this means that certificates that
are still valid should be revoked, otherwise a CA can't guaranty
that such certificates aren't used anymore (which it shouldn't have
issued in first place or taken care of it they had a longer
lifetime).<br>
<br>
However the key is probably the <i>must expire by</i> clause which
makes it binding. Meaning no more certificates with those properties
after X. <br>
<br>
<br>
<div class="moz-signature">
<table border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td colspan="2">Regards </td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
<tr>
<td>Signer: </td>
<td>Eddy Nigg, COO/CTO</td>
</tr>
<tr>
<td> </td>
<td><a href="http://www.startcom.org">StartCom Ltd.</a></td>
</tr>
<tr>
<td>XMPP: </td>
<td><a href="xmpp:startcom@startcom.org">startcom@startcom.org</a></td>
</tr>
<tr>
<td>Blog: </td>
<td><a href="http://blog.startcom.org">Join the Revolution!</a></td>
</tr>
<tr>
<td>Twitter: </td>
<td><a href="http://twitter.com/eddy_nigg">Follow Me</a></td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
</tbody>
</table>
</div>
<br>
</body>
</html>