Existing S/MIME CAs using RSA keys less than 3072 bit

[Stephen Davidson]

The attached shows the spread of validity periods for valid S/MIME subCAs in CCADB using RSA keys less than 3072 bit, as background for this discussion:

    *  Review of draft ballot requiring step up of new subCAs using RSA keys to 3072 bit or higher and eventual cease issuance on subCAs using RSA keys smaller than 3072.  https://github.com/cabforum/smime/compare/be9a18ab2b48eb0cbff41d3a268202f700c06c05...a90411aa2a7d2279692c21a35597a950cc9f37c7

 

Thanks to Ben Wilson for helping with the raw data.

 

Regards, Stephen

 

Stephen Davidson