On 08/12/16 12:46, Brian Smith wrote: > Are you intending to override the BR laxness for maximum OCSP lifetime > for intermedaites, or just match the BR requirements?
The wider context of this section includes an "For end-entity certificates:". So the wording as proposed matches the BRs in terms of duration. Gerv _______________________________________________ dev-security-policy mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security-policy

