[Servercert-wg] BR Section 4.9.1.1

[Ben Wilson]

All,

As I said at the F2F in Bergamo, the issues with BR section 4.9.1.1 are not
going to resolve themselves. We're going to have to address them sooner
rather than later.

Here are two more ideas that I've received from others:
1 - add a 30-day revocation timeframe for a few minor, non-security-related
mis-issuance types; and/or
2 - maintain a list of Subscribers, uses, FQDNs (or other) that can't meet
the revocation deadlines, and exempt them, but require that they use 90-day
certificates.

Thanks,

Ben
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20240626/b8e7c8a1/attachment.html>