[cabfcert_policy] Entropy in Certificate Serial Numbers

[Ben Wilson]

What about  this version of a proposed revision to Section 7.1 of the  BRs?

 

For all Certificates issued after _______, serialNumbers MUST be greater
than zero  (0), and for Certificates issued to Subscribers and Intermediate
CAs, the serialNumber MUST contain at least 64 unpredictable bits.

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://cabforum.org/pipermail/policyreview/attachments/20160217/4f79c18a/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4954 bytes
Desc: not available
Url : https://cabforum.org/pipermail/policyreview/attachments/20160217/4f79c18a/attachment.bin