search

aykevl / mta-sts

Online tool for MTA-STS checking: https://aykevl.nl/apps/mta-sts/
BSD 2-Clause "Simplified" License
39 stars 12 forks source link

why "4 weeks" #10

Open andreasschulze opened 4 years ago

andreasschulze commented 4 years ago

Hello,

the validator code warn on a max_age value shorter then 4 weeks

What's the rationale behind this selection? RFC 8461 only say

To mitigate the risks of attacks at policy refresh
time, it is expected that this value typically be in the range of
weeks or greater.

why did you choose 4 weeks ?

Andreas