[cabfpub] Short-Lived Certificate Draft Ballot
jeremy.rowley at digicert.com
Tue Oct 13 10:41:03 MST 2015
Validity Period is defined but never used in the Baseline Requirements and is never used in the EV Guidelines.
From: public-bounces at cabforum.org [mailto:public-bounces at cabforum.org] On Behalf Of Brian Smith
Sent: Thursday, October 8, 2015 5:40 PM
To: Rob Stradling
Cc: public at cabforum.org
Subject: Re: [cabfpub] Short-Lived Certificate Draft Ballot
On Thu, Oct 8, 2015 at 12:34 PM, Rob Stradling <rob.stradling at comodo.com<mailto:rob.stradling at comodo.com>> wrote:
"The validity period for a certificate is the period of time from
notBefore through notAfter, inclusive."
In the interest of avoiding confusion, consistency would be nice.
Could we change "Validity Period" to match RFC5280,
I agree that that the CAB Forum should use the same definition of "validity period" as RFC 5280, e.g. by defining it as a reference to the RFC 5280 definition. If another thing is needed then it should have a different name. All the uses of the term "validity period" in CAB Forum documents should be audited to see which definition is actually intended.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Public