For discussion:

Pre-Ballot 164 - Certificate Serial Number Entropy 

-- Motion Begins -- 

In Section 7.1 of the Baseline Requirements, 

REPLACE 

"CAs SHOULD generate non-sequential Certificate serial numbers that exhibit
at least 20 bits of entropy" 

WITH 

"Effective April 1, 2016, CAs SHALL use a Certificate serialNumber greater
than zero (0) that contains at least 64 unpredictable bits." 

-- Motion Ends -- 

 

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
Public mailing list
[email protected]
https://cabforum.org/mailman/listinfo/public

Reply via email to