[cabfpub] Short-Lived Certificate Draft Ballot

[Jeremy Rowley]

Validity Period is defined but never used in the Baseline Requirements and is never used in the EV Guidelines.

From: public-bounces at cabforum.org [mailto:public-bounces at cabforum.org] On Behalf Of Brian Smith
Sent: Thursday, October 8, 2015 5:40 PM
To: Rob Stradling
Cc: public at cabforum.org
Subject: Re: [cabfpub] Short-Lived Certificate Draft Ballot

On Thu, Oct 8, 2015 at 12:34 PM, Rob Stradling <rob.stradling at comodo.com<mailto:rob.stradling at comodo.com>> wrote:
RFC5280 says:
   "The validity period for a certificate is the period of time from
    notBefore through notAfter, inclusive."

In the interest of avoiding confusion, consistency would be nice.

Could we change "Validity Period" to match RFC5280,

I agree that that the CAB Forum should use the same definition of "validity period" as RFC 5280, e.g. by defining it as a reference to the RFC 5280 definition. If another thing is needed then it should have a different name. All the uses of the term "validity period" in CAB Forum documents should be audited to see which definition is actually intended.

Cheers,
Brian
--
https://briansmith.org/

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20151013/d3d32b04/attachment-0003.html>