<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Reposting with permissions from SSL247.com<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span lang="EN-GB" style="font-size:10.5pt">That would be my thoughts...</span><span lang="EN-GB"><o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span lang="EN-GB"> <o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span lang="EN-GB" style="font-size:10.5pt">We believe that limiting certificates to 1 year validity would have a big impact on the industry that could lead to worse validation standards that we'd want to avoid.</span><span lang="EN-GB"><o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span lang="EN-GB" style="font-size:10.5pt">We know that CAB/forum members and the industry want a 100% https internet, and this is fine, but the consequences of such a big/tough move will be dramatic.</span><span lang="EN-GB"><o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span lang="EN-GB"> <o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span lang="EN-GB" style="font-size:10.5pt">The question behind the scene is not « Customer prefers X » as stated by </span><span lang="EN-GB">Ryan Sleevi </span><span lang="EN-GB" style="font-size:10.5pt">but "Customers
will not be able to cope with Y », Y being 13 months validity on their certs. Probably fine for DV certificates that are delivered through automatic vetting processes but definitely not for OV and EV certs.</span><span lang="EN-GB"><o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span lang="EN-GB" style="font-size:10.5pt">This will have a huge impact on vetting for OV and EV certificates, with massive costs increases for CAs (more vetting, means more vetters, means big investments) and for
the final customer who will have to go through vetting every year. This move will only benefit the DV market which is definitely not the standard of SSL certificates we want to bring the market to as the customers won’t be able to cope with yearly audits/vettings. Time consumption
is a real issue within organizations and they will not be able to bear vetting for OV and EV certificates once a year.</span><span lang="EN-GB"><o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span lang="EN-GB"> <o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span lang="EN-GB" style="font-size:10.5pt">Finally on an economical point of view, browsers are asking CAs and reliable parties to spend more in vetting, infrastructure to increase issuance numbers, but also reducing
dramatically invoicing. Spending more and invoicing less is definitely not a viable economical equation, and a lot of smaller players that make the internet safer are going to disappear. </span><span lang="EN-GB"><o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span lang="EN-GB"> <o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span lang="EN-GB" style="font-size:10.5pt">Cheers,</span><span lang="EN-GB"><o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span lang="EN-GB"> <o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt"><span lang="EN-GB" style="font-size:10.5pt">Ben Tack </span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><a href="mailto:btack@ssl247.fr">btack@ssl247.fr</a></span><span lang="EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt">
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
</div>
</div>
</div>
</div>
</body>
</html>