On 2015-03-14 01:23, kim.da...@safe-mail.net wrote:
Is there an agreed timeline for deprecation of the technologies listed in the
initial posting? We should be proactive in this field.
For example, last month a plan to deploy 12000 devices to medical professionals
has been finalised, despite the devices using 1024bit RSA keys - on the grounds
that it works in current browsers and will likely keep working for the next 10
years. I am not happy about such outcomes.
Whoever thinks that this will keep working for the next 10 years is
clearly misinformed. CAs should not be issuing such certificates. If
they do, please let us know which CA does that so we can talk to them
about revoking them.
Kurt
--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto
