[cabfpub] To revoke or not to revoke 1024

[Eddy Nigg (StartCom Ltd.)]

On 06/24/2013 01:05 AM, From kirk_hall at trendmicro.com:
>
> Most or all of the 1024 certificates were issued before the Baseline 
> Requirements became effective, so the BRs didn’t apply to the issuance 
> of those certs.  If the Forum had intended that all 1024 certs issued 
> before the BRs became effective had to be revoked by 12/31/2013, the 
> BRs could have stated that – but they didn’t.
>

That's true - but I'm not sure if this is/was the intention of Mozilla. 
Anyway, there is a problem since a CA can simply issue certificates with 
a not-before date prior to the BR and then what?


Regards
Signer: 	Eddy Nigg, COO/CTO
	StartCom Ltd. <http://www.startcom.org>
XMPP: 	startcom at startcom.org <xmpp:startcom at startcom.org>
Blog: 	Join the Revolution! <http://blog.startcom.org>
Twitter: 	Follow Me <http://twitter.com/eddy_nigg>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20130624/c8480e79/attachment-0003.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4540 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.cabforum.org/pipermail/public/attachments/20130624/c8480e79/attachment-0001.p7s>