On 10/02/2016 08:49 AM, Richard Barnes wrote:
> This change seems to suppose that there is One True Cert Chain
It does not suppose that. It supposes most CAs will offer One
Recommended Cert Chain that is "best" for most of their customers. And
in fact that is the best common practice today.
Alternate chains can be offered with the Link rel=alternate that I
mentioned on-list (but haven't yet incorporated into the PR). What do
you think of that approach?
Acme mailing list