[cabfpub] Draft Ballot 185 - Limiting the Lifetime of Certificates

[Ryan Sleevi]

On Thu, Feb 2, 2017 at 7:52 AM, Steve Medin <Steve_Medin at symantec.com>
wrote:

> If it’s incredibly difficult, how is this a discussion for an industry
> forum rather than a stated policy technically enforced by the parties who
> see certificates valid longer than 13 months as a threat to their user base?
>

Mostly it's an opportunity for CAs to share reasons and actionable data
about why this would be unreasonable.

As a representative of a CA responsible for considerable misissuance, I
would have thought you'd be supportive of efforts to improve security by
reducing the risk and damage caused by rogue employees, rogue RAs, and
whatever rogue elements might cause future misissuance.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/public/attachments/20170202/daefc550/attachment.html>