Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make the default duration more aggressive to prepare for upcoming CA/B forum re-verification updates #9

Open
treidel opened this issue Jul 31, 2023 · 1 comment

Comments

@treidel
Copy link

treidel commented Jul 31, 2023

Proposed changes to the CA/B forum reverification requirements will require domains to be re-verified more often than currently is required. This ticket requests the default period to be chosen in alignment with those anticipated changes, e.g. possibly 60 days or even 20 days.

@vanbroup
Copy link
Collaborator

vanbroup commented Aug 2, 2023

Currently domains will be renewed 31 days before expiry (see the link below) unless a different preference is set by the suer, I think this should be sufficient to cover the proposed 90-day validity.

https://github.com/EntrustCorporation/dv/blob/main/main.go#L32

If the validity becomes sixty or even thirty days, we might need to move to a strategy where we renew date becomes a percentage of the validity, such as 50% of 30 days would be every 15 days, etc.

Do you think that 31 days before expiry is currently sufficient?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants