Let's Encrypt AUTHZ Reuse and Eternal Account Key

Re:Let's Encrypt AUTHZ Reuse and Eternal Account Key by dc352 on Tuesday October 25, 2016 @11:05AM (#12788584)

It is an interesting one - here is the original source (and there were many more mentioning 300 days).

https://community.letsencrypt.org/t/dns-authorization-lifeti...

It is from 14 June 2016 (a few months back), @pfg states "The CA/B Forum is currently developing new rules for domain validation and is probably going to settle on a validation period that is significantly longer than the 300 days currently in use ..."

Is there an authority to say which way it will go?

[ Parent | on HN ]

Re:Let's Encrypt AUTHZ Reuse and Eternal Account Key by pfg on Tuesday October 25, 2016 @11:10AM (#12788615)

I think it's 36 months right now, but that's a Baseline Requirements thing, Let's Encrypt can (and does) use shorter periods. 36 months is the upper limit for all CAs. Let's Encrypt currently uses 90 days, and will go to something like 7 days in the near-future[1].

[1]: https://community.letsencrypt.org/t/upcoming-api-changes/179...

[ Parent | on HN ]