signing / encryption keys (certs) for IdP metadata

[Donald Lohr]

We've seen examples when making the self-signed public key/cert to set 
it to 3650 days (10 years).

Is it a good practice to go more that 10 years?


Thanks,
Don

-- 
D o n a l d   L o h r
I n f o r m a t i o n   S y s t e m s
J a m e s   M a d i s o n   U n i v e r s i t y
5 4 0 . 5 6 8 . 3 7 3 0
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220428/d410b65d/attachment.htm>