[Servercert-wg] Upcoming limits on trusted certificates

[Adriano Santoni]

Indeed, that would be a more appropriate place to publish the 
clarification....

Adriano


Il 14/05/2020 13:57, Doug Beattie ha scritto:
>
> Updates to Root program requirements should (must?) be included in 
> published Root policy documents, so I’d prefer that Apple put the 
> details about the 398 day validity here: 
> https://www.apple.com/certificateauthority/ca_program.html
>
> If Apple can’t update their published policy then some may wonder if 
> the email announcement is an officially approved Apple statement and a 
> corporate position/requirement.
>
> Doug
>
> *From:* Servercert-wg <servercert-wg-bounces at cabforum.org> *On Behalf 
> Of *Adriano Santoni via Servercert-wg
> *Sent:* Thursday, May 14, 2020 4:16 AM
> *To:* servercert-wg at cabforum.org
> *Subject:* Re: [Servercert-wg] Upcoming limits on trusted certificates
>
> Clint,
>
> This has probably been asked before, I apologize in case I missed the 
> answer.
>
> We understand that Apple will be treating certificates longer than 
> 398  days , if issued after September 1, 2020, as a Root Policy 
> violation.
>
> This cannot be inferred from the existing announcement 
> (https://support.apple.com/en-us/HT211025).
>
> Could Apple publish an HT article (or integrate the existing one) to 
> clarify that? And if not, why not?
>
> Adriano
>
> Il 03/03/2020 22:00, Clint Wilson via Servercert-wg ha scritto:
>
>     Hi all,
>
>     As mentioned during the Apple Root Program update at the CA/B
>     Forum Face-to-Face Meeting 49, we have posted a KB article
>     describing the upcoming change to allowed certificate lifetimes
>     here: https://support.apple.com/en-us/HT211025.
>
>
>
>     Thank you!
>
>     -Clint
>
>
>
>     _______________________________________________
>
>     Servercert-wg mailing list
>
>     Servercert-wg at cabforum.org  <mailto:Servercert-wg at cabforum.org>
>
>     http://cabforum.org/mailman/listinfo/servercert-wg
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20200514/e2754daf/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4105 bytes
Desc: Firma crittografica S/MIME
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20200514/e2754daf/attachment.p7s>