On 27/03/17 16:18, Ryan Sleevi wrote:
> I'm curious whether you would consider 18 months an appropriate target for
> a deprecation to 1 year certificates. That is, do you believe a transition
> to 1 year certificates requires 24 months or 18 months, or was it chosen
> simply for its appeal as a staggered number (1 year -> 2 year certs, 2
> years -> 1 year certs)

The latter.

It sort of seems like if you were going to do 18 months, why not do 12
months, and have a single contract renegotiation? But I'm open to
further discussion.

dev-security-policy mailing list

Reply via email to