[cabfpub] Draft Ballot 185 - Limiting the Lifetime of Certificates: User input

Rob Stradling rob.stradling at comodo.com
Fri Feb 10 10:05:56 MST 2017


On 10/02/17 16:44, Ryan Sleevi via Public wrote:
> On Fri, Feb 10, 2017 at 8:25 AM, Scott Rea wrote:
>
>     The reasoning behind the 400 vs some other derivative of 13 months was
>     the 398 was an upper bound (per the logic you have described) plus 2
>     extra days were given to account for 398-day anniversary falling on a
>     week-end, so that the key holders and CAs could address any change
>     during normal business hours.

Weekends are a regular disruption to business hours, but they aren't the 
only such disruption during the course of a year.

Consider a certificate issued to a US subscriber that expires on 
Thursday November 23rd 2017.  Normal business hours won't resume until 4 
days later.
http://www.officeholidays.com/countries/usa/

Ditto for a certificate issued to a UK subscriber that expires on Friday 
14th April 2017.
https://www.gov.uk/bank-holidays

Would that justify an additional 2 extra days?

-- 
Rob Stradling
Senior Research & Development Scientist
COMODO - Creating Trust Online


More information about the Public mailing list