[Servercert-wg] Ballot SC22: Reduce Certificate Lifetimes

[Joanna Fox]

Hello all,

GoDaddy also sent a survey to our SSL customers on the topic of reduced lifetime certificates. Our survey focused on our customer base, the small business.  Total response size was 2732.  We have omitted customer comments as there were too many to review for personal data prior to posting.

The biggest takeaway from this was a clear need to be able to effectively communicate with Subscribers why this change is occurring and what we can do to help them overcome any obstacles that may arise due to the increased manual labor that is expected due to this change.  If certificate lifetime becomes reduced, I would ask to partner with the browsers to develop some clear, simple statements that all CA’s can use to help communicate the benefits of this change to our ecosystem.

Thank you,
Joanna Fox

Survey Questions:
Q1: Which of the following best describes the industry to which your company belongs? (Select one.)
[table3311521130.png]

Q2: Which title best describes your position at your organization? (Select one.)
[table3311521160.png]

Q3:  Which of the following most closely describes your job function in IT? (Select one)
[table3311521170.png]

Q4: How often do you replace your SSL/TLS certificates today?
[table3311521210.png]

Q5: Does your organization currently use automated certificate renewal and replacement methods (e.g., Venafi, ACME, DevOps orchestration)
[cid:image005.png at 01D55F43.0F606200]

Q6: The CA/Browser Forum is voting on a ballot reducing the maximum validity period for SSL/TLS certificates from the current 825 days (27 months) to 397 days (13 months), effective for new certificates issued on or after March 1, 2020. Would you vote in favor or against this?
[cid:image006.png at 01D55F43.0F606200]

Q7: If this ballot is approved, how would this impact your organization?
[table3311521760.png]

Q8: If this ballot is approved, which of these options would help your company adjust to this change?
[table3311522150.png]

Q9: Under the proposed ballot, an organization and its domains would have to be revalidated every year instead of every two years.  Do you believe this provides added security by revalidating this information every year?
[table3311522190.png]


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20190830/8fe86b77/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 79433 bytes
Desc: image001.png
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20190830/8fe86b77/attachment-0009.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 56423 bytes
Desc: image002.png
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20190830/8fe86b77/attachment-0010.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 56231 bytes
Desc: image003.png
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20190830/8fe86b77/attachment-0011.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.png
Type: image/png
Size: 20953 bytes
Desc: image004.png
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20190830/8fe86b77/attachment-0012.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.png
Type: image/png
Size: 123373 bytes
Desc: image005.png
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20190830/8fe86b77/attachment-0013.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image006.png
Type: image/png
Size: 102204 bytes
Desc: image006.png
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20190830/8fe86b77/attachment-0014.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image007.png
Type: image/png
Size: 21871 bytes
Desc: image007.png
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20190830/8fe86b77/attachment-0015.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image008.png
Type: image/png
Size: 23027 bytes
Desc: image008.png
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20190830/8fe86b77/attachment-0016.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image009.png
Type: image/png
Size: 21488 bytes
Desc: image009.png
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20190830/8fe86b77/attachment-0017.png>