On 09/01/17 17:39, Rich Smith via Public wrote:
<snip>
Scenario:
We ignore this and Ryan's arguments against, and we pass this proposal.
Next month we decide that the various browsers all now have enough
support for critical name constraints to update the BRs to MUST, but
because it will break your newly authorized dual-use certs Digicert is
now arguing against bringing the BRs back into full compliance w/RFC5280.
Geoff,
Would you (or anyone else from Apple) be able to provide CABForum with
data on the % of currently deployed Apple devices that support critical
name constraints?
Thanks.
--
Rob Stradling
Senior Research & Development Scientist
COMODO - Creating Trust Online
_______________________________________________
Public mailing list
[email protected]
https://cabforum.org/mailman/listinfo/public
