Open sleevi opened 7 years ago
In the spirit of simplifying implementation and reducing ambiguity, we're changing the CT Qualified table to reflect certificate lifetimes in terms of days, not months. The second of the above three interpretations was chosen for month-to-day conversion:
The other ranges are listed in the following comment in the Chromium bug: https://bugs.chromium.org/p/chromium/issues/detail?id=713362#c3
Currently, the number of SCTs related to the Lifetime of Certificate is defined in months. However, this leaves it ambiguous as to how to calculate it.
Several possible interpretations have been arrived at:
notAfter.year
-notBefore.year
) * 12 + (notAfter.month
-notBefore.month
), and then subtracting one ifnotAfter.day
<notBefore.day
.Expressing this in days is seen as least ambiguous.
For Chrome, this is https://bugs.chromium.org/p/chromium/issues/detail?id=713362