Peter Bowen <pzbo...@gmail.com> wrote: > Robin Alden <ro...@comodo.com> wrote: > Given that it doesn't, but that that the BRs say "MUST be either a > dNSName containing the FullyâQualified Domain Name or an iPAddress > containing the IP address", it is clear we still need to have a valid > FQDN. I'll update my scanner to allow "_" in the labels that are not > registry controlled or in the label that is immediately to the left of > the registry controlled labels. Give me a little while and I'll > upload a revised data set with this fix.
See https://bugzilla.mozilla.org/show_bug.cgi?id=1136616. In mozilla::pkix, we had to allow the underscore because of AWS. Cheers, Brian -- https://briansmith.org/ _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy
