[cabfpub] OCSP Stapling and Short-Lived Certificates Proposal
Ryan Hurst
ryan.hurst at globalsign.com
Sat Mar 23 10:28:49 MST 2013
I agree that a shorter validity would be good however. I am concerned about the figures COMODO has shared regarding the pervasive times skews on the Internet.
Ryan Hurst
Chief Technology Officer
GMO Globalsign
twitter: @rmhrisk
email: ryan.hurst at globalsign.com
phone: 206-650-7926
Sent from my phone, please forgive the brevity.
On Mar 23, 2013, at 9:09 AM, "Eddy Nigg (StartCom Ltd.)" <eddy_nigg at startcom.org> wrote:
>
> On 03/23/2013 06:06 PM, From kirk_hall at trendmicro.com:
>>
>> +1, Eddy.
>>
>> Let’s move on reducing the time for updating CRLs and OCSP responses to respond to Ryan’s point. That’s the best way to make revocation checking a must.
>
> Would you mind constructing a proposal along these lines?
>
>
> Regards
>
> Signer: Eddy Nigg, COO/CTO
> StartCom Ltd.
> XMPP: startcom at startcom.org
> Blog: Join the Revolution!
> Twitter: Follow Me
>
> _______________________________________________
> Public mailing list
> Public at cabforum.org
> https://cabforum.org/mailman/listinfo/public
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://cabforum.org/pipermail/public/attachments/20130323/ebe6cf72/attachment.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2098 bytes
Desc: not available
Url : https://cabforum.org/pipermail/public/attachments/20130323/ebe6cf72/attachment.bin
More information about the Public
mailing list