|
|
This topic comprises 3 pages: 1 2 3
|
|
Author
|
Topic: CLASS ACTION SUIT... please
|
|
|
|
|
|
|
|
|
|
|
Marcel Birgelen
Film God
Posts: 3357
From: Maastricht, Limburg, Netherlands
Registered: Feb 2012
|
posted 05-30-2017 06:56 AM
quote: Steve Guttag I'm curious, can you answer if there is some sort of rule/regulation/requirement as to how long a certificate MAY last?
There aren't really any cross industry guidelines or regulations on certificate expiry dates. Some industries have their own regulations and guidelines regarding specific implementations.
The consensus seems to be that the expiry date has to be based on the use case. If a certificate cannot be easily revoked for example and the expiry date is important for access control, then you obviously should go for a rather short period.
For stuff that should last longer, like root certificates, intermediate certificates or device certificates, best practice seems to be to make a reasonable assumption of what the expected time-frame will be, in which the underlying private key will still be secure, given its strength.
A period of 40 years should be more than reasonable for any digital equipment. I'm not sure if we can make an accurate prediction of what computing would look like in 40 years though. If anybody invents a working quantum computer with sufficient amounts of qubits in the meantime, RSA and ECC will become obsolete immediately.
Still, I think manufacturers should be more forthcoming in opening up a platform in any reasonable way, after it's been abandoned by them.
| IP: Logged
|
|
|
|
|
|
|
|
All times are Central (GMT -6:00)
|
This topic comprises 3 pages: 1 2 3
|
Powered by Infopop Corporation
UBB.classicTM
6.3.1.2
The Film-Tech Forums are designed for various members related to the cinema industry to express their opinions, viewpoints and testimonials on various products, services and events based upon speculation, personal knowledge and factual information through use, therefore all views represented here allow no liability upon the publishers of this web site and the owners of said views assume no liability for any ill will resulting from these postings. The posts made here are for educational as well as entertainment purposes and as such anyone viewing this portion of the website must accept these views as statements of the author of that opinion
and agrees to release the authors from any and all liability.
|