[gtld-tech] ICANN CRL expired and not updated yet

[Rubens Kuhl]

> On Jul 30, 2015, at 9:58 PM, Francisco Arias <francisco.arias at icann.org> wrote:
> 
> Hi Kal,
> 
> The first version of the TMCH CA CRL had a "Next Update" field set to
> 2015-07-23 23:59:59 UTC. The second version of the CRL was published on
> 2015-07-28 01:35:00 UTC. Leaving a window of 4 days, 1 hour and 35 minutes
> of potential impact.
> 
> (...)

> Moving forward, ICANN plans to publish a definitive schedule for future
> CRL updates. Registries and registrars must continue refreshing the CRL as
> specified in draft-lozano-tmch-func-spec (i.e., at least every 24 hours).


If the refresh is at least every 24h, that would add another another day to the potential impact. 


Rubens