home.social

#sc81 — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #sc81, aggregated by home.social.

  1. Does anyone know of the CA/Browser forum SC81 ballot to reduce certificate validity periods only applies to TLS Server and Client certificate usages or if it applies to all key usages?

    This could create a huge pile of churn and toil if it also applies to certs used for SAML assertion signing, which have key usages set for: Digital Signature, Non Repudiation, Key and Data Encipherment.

    ETA: paging @ScottHelme now that I've found him here.

    #security #certificates #sc81 #cabforum

  2. Does anyone know of the CA/Browser forum SC81 ballot to reduce certificate validity periods only applies to TLS Server and Client certificate usages or if it applies to all key usages?

    This could create a huge pile of churn and toil if it also applies to certs used for SAML assertion signing, which have key usages set for: Digital Signature, Non Repudiation, Key and Data Encipherment.

    ETA: paging @ScottHelme now that I've found him here.

    #security #certificates #sc81 #cabforum