I also agree with the proposal, but I am not clear where does this
"magic number" of 72 (months) come from...
Adriano
Il 04/04/2024 20:59, Martijn Katerbarg via Cscwg-public ha scritto:
Hi Ian,
I like that proposal. Perhaps a minor nit is that I’d suggest we
replace “new” with “newly
+1
Il 04/04/2024 04:20, Mohit Kumar via Cscwg-public ha scritto:
Hi Martijn,
Can I confirm that the proposal to protect private keys of Subordinate
CAs in an offline state is applicable to only private keys generated
for Roots/Subordinate CAs created after the effective date.
Also, per my