[cabfpub] Restrict certificate lifetime to domain registration period (if certificate expiry date is greater than domain registration)
geoffk at apple.com
Fri Jan 12 12:34:21 MST 2018
> On Jan 11, 2018, at 2:56 PM, James Burton via Public <public at cabforum.org> wrote:
> Shouldn't we start restricting the certificate lifetime to domain registration period if the certificate expiry date is greater than domain registration period?
Sometimes the domain registration will be extended close to its expiry, a few weeks before or even exactly on the expiry date—for example, with most kinds of autorenewal system. That won’t give enough time to obtain, install, and test a replacement certificate.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 3321 bytes
Desc: not available
More information about the Public