Position on 1-Year Certificates

I think having shorter cert lifetimes is generally a good thing and with tools like Let's Encrypt its becoming easier and easier.

If anyone is aware of how Safari came up with the 398 day number I'd love to know.