[Cscwg-public] Code Signing Key Size changes

[Dean Coclin]

I'm not sure if everyone is aware that minimum key sizes are going to change
soon.

 

The Code Signing BRs specify that certs issued after Jan 1, 2021 must have
3072 RSA keys (vs the current 2048). This has been in there for a while, but
I fear that customers may not be prepared as it has not been well
advertised.

In addition, making changes at the beginning of January is always risky due
to holidays, shutdowns, freezes, etc. 

 

I'm wondering if there is any appetite to move this to April or May 2021? 

 

 

Dean

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/cscwg-public/attachments/20200903/ad9b17fa/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4916 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/cscwg-public/attachments/20200903/ad9b17fa/attachment.p7s>