Gervase Markham wrote:
Nelson Bolyard wrote:
Yes. You are unlikely to find them anywhere except in exterprise
intranet situations where the enterprise has chosen to standardize on
mozilla or
other NSS-based clients.
(The reason it's interesting is that the lack of existence of | in the
wild makes the algorithm for converting the CN/subjectAltName from the
cert into something to display in the domain indicator quite a bit
simpler.)
Gerv,
Under what circumstances do you want to display in the status bar
the names from the cert rather than the name the user typed?
And under those circumstances, which of the potentially many names in
the cert will you display?
If the name that was entered (typed, or in a link) matches one of the
regular expressions in the cert's list, doesn't it suffice to display
that name?
Are you thinking of an improved cert name mismatch dialog that displays
all the names in the cert? (I'd like that.) If so, just display those
names/expressions "as is". no need to do any conversions on them.
/Nelson
_______________________________________________
mozilla-crypto mailing list
[email protected]
http://mail.mozilla.org/listinfo/mozilla-crypto
