On 24 September 2016 at 19:17, Ilari Liusvaara <ilariliusva...@welho.com> wrote: > It occured to me that certain extensions might be considered to be per- > chain. Like e.g. type of the certificate. Where do extensions like that > go? Always to the extension block of the first certificate (except that > might cause somewhat of a cyclic dependency in parsing)?
The type of which certificate? The end-entity? Seems like that belongs with the end-entity cert then. _______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls
