[gtld-tech] ICANN CRL expired and not updated yet
Rubens Kuhl
rubensk at nic.br
Fri Jul 31 01:30:43 UTC 2015
> On Jul 30, 2015, at 9:58 PM, Francisco Arias <francisco.arias at icann.org> wrote:
>
> Hi Kal,
>
> The first version of the TMCH CA CRL had a "Next Update" field set to
> 2015-07-23 23:59:59 UTC. The second version of the CRL was published on
> 2015-07-28 01:35:00 UTC. Leaving a window of 4 days, 1 hour and 35 minutes
> of potential impact.
>
> (...)
> Moving forward, ICANN plans to publish a definitive schedule for future
> CRL updates. Registries and registrars must continue refreshing the CRL as
> specified in draft-lozano-tmch-func-spec (i.e., at least every 24 hours).
If the refresh is at least every 24h, that would add another another day to the potential impact.
Rubens
More information about the gtld-tech
mailing list