W dniu pią, 06.07.2018 o godzinie 08∶40 +0200, użytkownik Ulrich Mueller
napisał:
> > > > > > On Fri, 06 Jul 2018, Michał Górny wrote:
> > Did you even read the text? It's 'at most 2 years'. If you renew it
> > every year, you can achieve the desired effect while keeping far
> > ahead of the required schedule.
>
> So effectively we're down from 5 years to 1 year also for the main
> key, as a mandatory requirement? That is not what I have perceived
> as the consensus in the discussion so far.
>
> > I really see no point in added complexity just so that someone could
> > bend the standard to the limits.
>
> It isn't complicated in the current version of GLEP 63 ("5 years
> maximum"). Simply keep that wording, or moderately shorten it, to
> something like 3 years, or 2.25 years. (Or if you prefer round
> numbers, 800 days, or 70000000 seconds.) :-)
> Went for 900 days. This will be easier to test script-wise (i.e. without having to fight over how many days a year has) and give you a long grace period for early renewal (and for keys created late in the year). -- Best regards, Michał Górny
signature.asc
Description: This is a digitally signed message part
