On 19/10/17 15:44, Jeremy Rowley wrote:
> This seems to indicate SRV restrictions are something new compared to domain
> name constraints. I suppose it's largely up to UA's implementing the RFC at
> this point.

Do we know anyone who has?

Is strikes me (at first glance, and perhaps someone more technical will
tell me why this is actually a terrible idea) that making DNS name
constraints apply to the DNS portion of SVRNames in implementations
might solve a lot of the problems with "missing restrictions" that we
are otherwise going to have.

Gerv

_______________________________________________
Public mailing list
[email protected]
https://cabforum.org/mailman/listinfo/public

Reply via email to