Re: [Servercert-wg] [Voting Period Begins]: SC-72 - Delete except to policyQualifiers in EVGs; align with BRs by making them NOT RECOMMENDED

2024-03-29 Thread Ryan Dickson via Servercert-wg
Google votes YES on SC-72. On Thu, Mar 28, 2024 at 12:53 PM Tim Hollebeek via Servercert-wg < servercert-wg@cabforum.org> wrote: > DigiCert votes YES on SC-72. > > > > -Tim > > > > *From:* Servercert-wg *On Behalf Of *Paul > van Brouwershaven via Servercert-wg > *Sent:* Monday, March 25, 2024

Re: [Servercert-wg] Compromised/Weak Keys Ballot Proposal

2024-03-29 Thread Roman Fischer via Servercert-wg
Could we limit the Debian Weak keys to key sizes up to RSA 4096 bit? I don’t think that anybody “accidentally” creates an 8192 bit RSA key on a system vulnerable to Debian Weak keys. Kind regards Roman PS: Can somebody explain, why we only test close primes with 100 rounds and not e.g. 1000?