Not sure, I will pass on the question to ATT. From: Public [mailto:[email protected]] On Behalf Of Ryan Sleevi via Public Sent: Tuesday, February 21, 2017 3:18 PM To: Peter Bowen <[email protected]> Cc: Ryan Sleevi <[email protected]>; CA/Browser Forum Public Discussion List <[email protected]> Subject: Re: [cabfpub] Draft Ballot 185 - Limiting the Lifetime of Certificates
Dean, Can you share whether or not that was the case for AT&T? On Tue, Feb 21, 2017 at 11:43 AM, Peter Bowen <[email protected]<mailto:[email protected]>> wrote: Many organizations have policies to not re-use keys between certificates. Dropping the validity period therefore effectively drops the key usage period. On Feb 21, 2017, at 10:54 AM, Ryan Sleevi via Public <[email protected]<mailto:[email protected]>> wrote: This doesn't seem particularly relevant - I haven't heard any suggestion that this is about ensuring frequent key rotation, as opposed to all the other policies and practices being attested to in conjunction with the keys. On Tue, Feb 21, 2017 at 10:52 AM, Dean Coclin via Public <[email protected]<mailto:[email protected]>> wrote: Posting on behalf of AT&T: AT&T typically looks to NIST for guidance and reference on industry standards, see page 45 of the attached (NIST SP800-57-Pt1R4) document.
_______________________________________________ Public mailing list [email protected] https://cabforum.org/mailman/listinfo/public
