On 27/03/17 16:18, Ryan Sleevi wrote: > I'm curious whether you would consider 18 months an appropriate target for > a deprecation to 1 year certificates. That is, do you believe a transition > to 1 year certificates requires 24 months or 18 months, or was it chosen > simply for its appeal as a staggered number (1 year -> 2 year certs, 2 > years -> 1 year certs)
The latter. It sort of seems like if you were going to do 18 months, why not do 12 months, and have a single contract renegotiation? But I'm open to further discussion. Gerv _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy