You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
....The CA MAY use the documents and data provided in Section 3.2 to verify certificate information, or may reuse previous validations themselves, provided that the CA obtained the data or document from a source specified under Section 3.2 or completed the validation itself no more than 825 days prior to issuing the Certificate.
IMO this aspect is not crystal-clear with the current wording, so I would suggest to clarify that "previous validations" include Validation of authority (section 3.2.5). The doubt may arise because Validation of authority is arguably not part of "certificate information", unless this term is defined so to include it. The use of both expressions "certificate information" and "previous validations" within the same sentence, in a way as if they were synonyms, leads to ambiguity. Current practice is such that, in fact, Validation of authority is often reused by certificate management portals and the likes. I'd like this aspect to be clarified by suitably changing the wording above, leaving no room for interpretation.
The text was updated successfully, but these errors were encountered:
@aarongable
IMO it does not, or I would not have raised this issue.
However, so far its just my view against yours, so it would be useful to get opinions from other people.
At any rate, I will open a PR to propose a revision of language.
Section 4.2.1 of the BR reads:
IMO this aspect is not crystal-clear with the current wording, so I would suggest to clarify that "previous validations" include Validation of authority (section 3.2.5). The doubt may arise because Validation of authority is arguably not part of "certificate information", unless this term is defined so to include it. The use of both expressions "certificate information" and "previous validations" within the same sentence, in a way as if they were synonyms, leads to ambiguity. Current practice is such that, in fact, Validation of authority is often reused by certificate management portals and the likes. I'd like this aspect to be clarified by suitably changing the wording above, leaving no room for interpretation.
The text was updated successfully, but these errors were encountered: