Certificate Validity Survey |
Thank you for your willingness to complete this very important survey. Your opinion matters and can help to oppose or approve these proposed changes to browser certificate and domain validity. Below is some background information before you complete the survey.
Background: The CA/Browser Forum (CABF) is an industry group that sets standards for TLS/SSL server certificates, including the maximum permitted validity period for certificates. The current maximum certificate validity period is 825 days, which is approximately 27 months. Before a CA can issue an SSL certificate, all organization and domain information must have been validated within the prior 27 months.
Google has proposed a ballot in the CABF to reduce the maximum certificate validity period by more than half, to 397 days which is roughly 13 months. The ballot would also require that the organization and domain information must be revalidated within the prior 13 months. This change would apply to all new certificates issued on or after March 1, 2020.
Google has previously indicated its desire to continue to reduce the maximum validity period of SSL certificates down to a target of of 90 days, which will require website owners to implement full automation for certificate issuance, reissuance and renewal. This ballot is a step in that direction.
Background: The CA/Browser Forum (CABF) is an industry group that sets standards for TLS/SSL server certificates, including the maximum permitted validity period for certificates. The current maximum certificate validity period is 825 days, which is approximately 27 months. Before a CA can issue an SSL certificate, all organization and domain information must have been validated within the prior 27 months.
Google has proposed a ballot in the CABF to reduce the maximum certificate validity period by more than half, to 397 days which is roughly 13 months. The ballot would also require that the organization and domain information must be revalidated within the prior 13 months. This change would apply to all new certificates issued on or after March 1, 2020.
Google has previously indicated its desire to continue to reduce the maximum validity period of SSL certificates down to a target of of 90 days, which will require website owners to implement full automation for certificate issuance, reissuance and renewal. This ballot is a step in that direction.
Google has indicated that if this CABF ballot does not pass that they will mandate this. It’s likely that Chrome would not trust certificates valid for longer than 13 months, much like Google has done with their Certificate Transparency Policy. This would permit CAs to continue issuing 825 day SSL certificates which are compliant and trusted by all browsers except Chrome; however, the details of such a proposal, especially around the reduction in the organization and domain revalidation periods, haven’t been released by Google.
This survey is confidential. You and your organization will not be identified by name, and responses from different organizations and different issuing Certification Authorities (CAs) will be combined.
This survey is confidential. You and your organization will not be identified by name, and responses from different organizations and different issuing Certification Authorities (CAs) will be combined.