Changes

Jump to: navigation, search

CA/Forbidden or Problematic Practices

355 bytes added, 17:09, 17 March 2011
Long-lived DV certificates
Some CAs issue DV SSL certificates that have expiration times several years in the future. This increases the time during which the possibility of such an attack exists.
 
'''Important:''' According to section 6 of the [http://www.mozilla.org/projects/security/certs/policy/InclusionPolicy.html Mozilla CA Certificate Inclusion Policy] CAs who issue long-lived SSL certs must "verify that all of the information that is included in SSL certificates remains current and correct at time intervals of thirty-nine months or less"
=== Wildcard DV SSL certificates ===
Confirm, administrator
5,526
edits

Navigation menu