[tor-bugs] #8443 [Tor]: SSL handshake filtered when MAX_SSL_KEY_LIFETIME_ADVERTISED is 365 days

[Tor Bug Tracker & Wiki]

#8443: SSL handshake filtered when MAX_SSL_KEY_LIFETIME_ADVERTISED is 365 days
------------------------+---------------------------------------------------
 Reporter:  arma        |          Owner:                    
     Type:  defect      |         Status:  needs_revision    
 Priority:  normal      |      Milestone:  Tor: 0.2.4.x-final
Component:  Tor         |        Version:                    
 Keywords:  tor-bridge  |         Parent:                    
   Points:              |   Actualpoints:                    
------------------------+---------------------------------------------------

Comment(by phw):

 Replying to [comment:9 nickm]:
 > phw -- while you're at it, what's the distribution on time of day at
 which certs start and end?  I bet that a large number start or end at the
 start or end of a day, and a large number start or end at the start or end
 of an hour.

 When ignoring year/month/day, 42% of all certificates start at 00:00:00
 *and* end at 23:59:59.

 42% of all certificates end at x:59:59. There's only a negligible amount
 of end times other than x:59:59. Pretty much the same applies to the start
 times - just that the time is x:00:00, of course.

 So it looks like your first guess is true. Starting and ending around
 midnight is very popular. Your second guess does not seem to be true,
 though. The amount of certificates starting or ending around the start/end
 of an hour (+/- 1 second) other than midnight is < 0.6%.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8443#comment:12>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online