Paul Hoffman:
Proposal:
a) Starting January 1 2009, all new CA roots must be 2048 bit RSA or
256 bit EC.
b) Starting January 1 2014, all CA roots must be 2048 bit RSA or 256 bit EC.
Dates and sizes can be argued, of course. I would argue against the
date in (b) being more than five years after the date in (a).


That sounds like a good plan! Reality might hasten the arrival of (b) perhaps depending on developments we can't foresee.

Regards
Signer:         Eddy Nigg, StartCom Ltd. <http://www.startcom.org>
Jabber:         [EMAIL PROTECTED] <xmpp:[EMAIL PROTECTED]>
Blog:   Join the Revolution! <http://blog.startcom.org>
Phone:  +1.213.341.0390


_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to