[Servercert-wg] Upcoming limits on trusted certificates

[Doug Beattie]

Updates to Root program requirements should (must?) be included in published
Root policy documents, so I'd prefer that Apple put the details about the
398 day validity here:
https://www.apple.com/certificateauthority/ca_program.html

 

If Apple can't update their published policy then some may wonder if the
email announcement is an officially approved Apple statement and a corporate
position/requirement.

 

Doug

 

From: Servercert-wg <servercert-wg-bounces at cabforum.org> On Behalf Of
Adriano Santoni via Servercert-wg
Sent: Thursday, May 14, 2020 4:16 AM
To: servercert-wg at cabforum.org
Subject: Re: [Servercert-wg] Upcoming limits on trusted certificates

 

Clint,

This has probably been asked before, I apologize in case I missed the
answer. 

We understand that Apple will be treating certificates longer than 398  days
, if issued after September 1, 2020, as a Root Policy violation. 

This cannot be inferred from the existing announcement
(https://support.apple.com/en-us/HT211025). 

Could Apple publish an HT article (or integrate the existing one) to clarify
that? And if not, why not?

Adriano

 

Il 03/03/2020 22:00, Clint Wilson via Servercert-wg ha scritto:

Hi all, 

 

As mentioned during the Apple Root Program update at the CA/B Forum
Face-to-Face Meeting 49, we have posted a KB article describing the upcoming
change to allowed certificate lifetimes here:
<https://support.apple.com/en-us/HT211025>
https://support.apple.com/en-us/HT211025.





Thank you!

-Clint





_______________________________________________
Servercert-wg mailing list
Servercert-wg at cabforum.org <mailto:Servercert-wg at cabforum.org> 
http://cabforum.org/mailman/listinfo/servercert-wg

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20200514/ecc5ec18/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5688 bytes
Desc: not available
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20200514/ecc5ec18/attachment-0001.p7s>