2 ms·
It's basically what has been announced here, though, no? There's no technical impediment to a CA continuing to hand out 2+ year certs. The only reason they woul
by wool_gather 7y ago
It's basically what has been announced here, though, no? There's no technical impediment to a CA continuing to hand out 2+ year certs. The only reason they would not do so is that webpages will start breaking if they're accessed from Safari.
- tambre 7y agoThe criteria are very clear: - Safari - max 398 days
- luckylion 7y ago> The criteria are very clear: today. Tomorrow they may change to be 397 days, or 39.8 days, or "until the next iPhone is released".
- chrisandchris 7y agoIsn‘t that a bit like arguing about the 825 days? The CA/B could change that aby day they want and there‘s nothing you can do. Others will follow Apple and the CA/B will follow too, like they should have in 2017, IMHO. The 398 days isn‘t something they came up right before they presented it. It‘s already 3 years old...
- labawi 7y agoNope. Today, tomorrow and for 6 more months is 825 days. As of September 1, 2020, it will be 398 days - a change people knew was coming for a long time.
- luckylion 7y agoThe point is that they can change it any time ("tomorrow"), not that they will literally change it tomorrow. How much time they will give you to prepare doesn't really matter, it's still unilaterally forcing everyone to adapt.
- wool_gather 7y agoTo the owner of the cert, I suppose. But how many browser users are even aware of the existence of certificates, let alone CAs and expiration dates?