Peter Bowen <[email protected]> wrote: > Robin Alden <[email protected]> wrote: > Given that it doesn't, but that that the BRs say "MUST be either a > dNSName containing the FullyâQualified Domain Name or an iPAddress > containing the IP address", it is clear we still need to have a valid > FQDN. I'll update my scanner to allow "_" in the labels that are not > registry controlled or in the label that is immediately to the left of > the registry controlled labels. Give me a little while and I'll > upload a revised data set with this fix.
See https://bugzilla.mozilla.org/show_bug.cgi?id=1136616. In mozilla::pkix, we had to allow the underscore because of AWS. Cheers, Brian -- https://briansmith.org/ _______________________________________________ dev-security-policy mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security-policy
